微点抓到一个厉害的家伙居然过大多主流

xiaotuzi

正在悠闲的网上冲浪突然微点报警，连病毒和衍生物也删除了

拿到网上扫描下了一跳居然过大多主流

[ 本帖最后由 xiaotuzi 于 2008-11-23 17:01 编辑 ]

xiaotuzi

a-squared 4.0.0.26 20081122213205 2008-11-22 - 8.244
AntiVir 7.9.0.35 7.1.0.122 2008-11-21 TR/Crypt.PEPM.Gen 1.552
Arcavir 1.0.5 200811211356 2008-11-21 - 1.240
Authentium 5.1.1 200811221606 2008-11-22 W32/Heuristic-210!Eldorado (Heuristic) 1.073
AVAST! 3.0.1 081122-0 2008-11-22 - 0.007
AVG 7.5.52.442 270.9.9/1806 2008-11-22 - 1.753
BitDefender 7.81008.2253518 7.22029 2008-11-23 - 2.096
CA (VET) 9.0.0.143 31.6.6222 2008-11-22 - 28.742
ClamAV 0.94.1 8665 2008-11-23 - 0.009
Comodo 2.11 2.0.0.712 2008-11-20 - 1.929
CP Secure 1.1.0.715 2008.11.22 2008-11-22 - 6.483
Dr.Web 4.44.0.9170 2008.11.23 2008-11-23 - 3.640
ewido 4.0.0.2 2008.11.22 2008-11-22 - 6.802
F-Prot 4.4.4.56 20081122 2008-11-22 Possible W32/Heuristic-210!Eldorado (not disinfectable) 1.113
F-Secure 5.51.6100 2008.11.23.01 2008-11-23 - 1.042
GData 19.1638/19.117 20081123 2008-11-23 - 4.620
Ikarus T3.1.01.45 2008.11.23.71899 2008-11-23 - 3.464
Microsoft 1.4104 2008.11.23 2008-11-23 TrojanDownloader:Win32/Yellsob.A 4.208
mks_vir 2.01 2008.11.17 2008-11-17 - 2.679
Norman 5.93.01 5.93.00 2008-11-22 - 5.364
nProtect 2008-11-21.03 2625860 2008-11-21 - 3.332
Quick Heal 10.00 2008.11.21 2008-11-21 Suspicious - DNAScan 0.993
Sophos 2.80.0 4.35 2008-11-23 Mal/Dropper-Y 2.085
Sunbelt 4474 4474 2008-11-04 - 1.167
The Hacker 6.3.1.1 v00160 2008-11-23 - 0.479
VBA32 3.12.8.9 20081122.1705 2008-11-22 - 2.010
ViRobot 20081121 2008.11.21 2008-11-21 - 0.398
VirusBuster 4.5.11.10 10.94.3/715526 2008-11-22 - 0.945
卡巴斯基 5.5.10 2008.11.23 2008-11-23 - 0.103
安博士V3 2008.11.23.00 2008.11.23 2008-11-23 - 1.713
安天 2.0.18 20081122.1722967 2008-11-22 - 0.121
江民杀毒 11.0.706 2008.11.23 2008-11-23 - 2.788
熊猫卫士 9.05.01 2008.11.22 2008-11-22 Suspicious file 2.701
瑞星 20.0 21.04.61.00 2008-11-23 - 0.881
赛门铁克 1.3.0.24 20081122.003 2008-11-22 - 0.077
趋势科技 8.700-1004 5.670.20 2008-11-22 - 0.041
迈克菲 5.3.00 5442 2008-11-22 - 2.539
金山毒霸 2008.9.8.18 2008.11.23.15 2008-11-23 - 1.545
飞塔 2.81-3.117 9.735 2008-11-22 -

linjw

Begin scan in 'D:\X.rar'
D:\X.rar
    [0] Archive type: RAR
    --> X.EXE
      [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
    [NOTE]      A backup was created as '499b1b7c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

舞动柱头

卡巴2009拦截

junan

瑞星拦截

syfwxmh

Hello,

X.exe_ - Trojan-Dropper.Win32.Agent.aacb

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.


>From:
>Sent: Nov 23 2008  9:22AM
>To: "New Virus" <newvirus@kaspersky.com>
>Subject: rookit*1
>
>
> password:virus
> ------------------
> The Russia Kaspersky Lab Board Of the Honor Members
>
> Users ID:syfwxmh
>
--
Best regards, Sergey Prokudin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

luxiao200888

Avira kill

wai0903

過不了Avira

Mr.Z

norton報suspicious.ah,15

star_xing

C:\Documents and Settings\ztx\桌面\X.rar > RAR > X.EXE - Win32/TrojanClicker.Agent.NDJ 特洛伊木马 的变种