6

sam.to

943666c2a500589ce404da60fb2074f7   GmRCnt.ex1e
34888738d6e159ae6c3ab999fb75c4e0   dzh_2008v5.exe3
4c2319a1fcee54cc456b039f5ab685dc   smss.ex2e
a06f0ceba202a8ae5164ca7aa668ad13   Mangerr.ex3e
68a7285be88a06b7617e2c7b7703f688   CoralQQ.ex3e
50443d7f4e86a54daa2f8acded3054fc   hei.ex3e


22/11/2008 16:57:30        已偵測: Trojan.Win32.Agent.aoou        C:\Documents and Settings\kato9096\桌面\04585147\dzh_2008v5.exe3/stream/data0002               
22/11/2008 16:57:41        已偵測: not-a-virus:AdWare.Win32.Zhongsou.bb        C:\Documents and Settings\kato9096\桌面\04585147\dzh_2008v5.exe3/stream/data0003/data0006               
22/11/2008 16:57:42        已偵測: Trojan.Win32.KillAV.avc        C:\Documents and Settings\kato9096\桌面\04585147\dzh_2008v5.exe3/stream/data0005               
22/11/2008 16:57:42        已偵測: Trojan-Downloader.Win32.Small.agei        C:\Documents and Settings\kato9096\桌面\04585147\dzh_2008v5.exe3/stream/data0007               
22/11/2008 16:57:42        已偵測: Trojan-Downloader.Win32.Agent.aovv        C:\Documents and Settings\kato9096\桌面\04585147\dzh_2008v5.exe3/stream/data0009/data0003/PE_Patch/UPack/PE_Patch               
22/11/2008 16:57:43        已偵測: Backdoor.Win32.Hupigon.ertv        C:\Documents and Settings\kato9096\桌面\04585147\dzh_2008v5.exe3/stream/data0011               
22/11/2008 16:57:43        已偵測: Backdoor.Win32.Hupigon.etyj        C:\Documents and Settings\kato9096\桌面\04585147\hei.ex3e               

上报4个到卡巴

[ 本帖最后由 sam.to 于 2008-11-22 17:03 编辑 ]

luxiao200888

C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » t04_8888.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » setup1487.exe - Win32/TrojanDownloader.Flux.AF trojan
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » TBSetup(-33554357).exe » NSIS » ToolBand.dll - Win32/Adware.Zhongsou application
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » TBSetup(-33554357).exe » NSIS » Toolbar_bho.dll - Win32/Adware.Zhongsou application
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » setup_102725.exe - a variant of Win32/Agent.OCX trojan
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » qq02.exe - probably a variant of Win32/TrojanClicker.Agent.NEQ trojan
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » 10.exe - a variant of Win32/Delf.NQX trojan
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » Setup703.exe - probably a variant of Win32/TrojanDownloader.Delf.OHJ trojan
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » go8_1001.exe » NSIS » loadssl.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Owner\桌面\04585147\dzh_2008v5.exe3 » NSIS » 2.exe - Win32/TrojanDownloader.Delf.OJW trojan

[ 本帖最后由 luxiao200888 于 2008-11-22 17:04 编辑 ]

sam.to

來了

megakotaro

紅傘漏三個
已回報

欠妳緈諨

S:\04585147\CoralQQ.ex3e - 特征码 'Trojan-Downloader.Win32.Dadobra' 被发现
S:\04585147\dzh_2008v5.exe3
S:\04585147\GmRCnt.ex1e - 特征码 'Trojan-Spy.Win32.Banker.atx' 被发现
S:\04585147\hei.ex3e - 可疑代码段 被发现 (Level: 105)
S:\04585147\Mangerr.ex3e - 可疑代码段 被发现 (Level: 40)
S:\04585147\smss.ex2e

        6 文件被扫描
          (1 压缩档 0 文件)
        2 特征码被侦测
        2 可疑代码段被发现
        耗时: 0:02.000