7xClicker

qianwenxiang

某站不小心挖到

syfwxmh

kaspersky signature miss2 TO KL

wangjay1980

2 TO KL

挪威的冬天

信息        2008-12-26  20:42:18        您此次查毒共查出5个病毒以及危险代码                       
信息        2008-12-26  20:42:18        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件14个                       
信息        2008-12-26  20:42:18        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-12-26  20:42:18        D:\Desktop\Clicker\w.exe        Win32.Hack.Huigezi.802816        跳过，未处理       
病毒        2008-12-26  20:42:18        D:\Desktop\Clicker\clicker5.5.Visual.exe        Win32.Hack.Huigezi.802816        跳过，未处理       
病毒        2008-12-26  20:42:18        D:\Desktop\Clicker\clicker5.5.Hidden.exe        Win32.Hack.Huigezi.802816        跳过，未处理       
病毒        2008-12-26  20:42:18        D:\Desktop\Clicker\Clicker5.4.Visual.exe        Win32.Hack.Huigezi.802816        跳过，未处理       
病毒        2008-12-26  20:42:18        D:\Desktop\Clicker\Clicker5.4.Hidden.exe        Win32.Hack.Huigezi.802816        跳过，未处理       

金山毒霸可信认证查询结果如下:

报告生成于:   2008/12/26 20:41

clicker5.5.Visual.exe      --------      病毒


Clicker5.4.Hidden.exe      --------      未知
clicker5.4.Hidden0.exe      --------      未知
Clicker5.4.Visual.exe      --------      未知
clicker5.4.Visual0.exe      --------      未知
clicker5.5.Hidden.exe      --------      未知
w.exe      --------      未知


理论文件总数:        7
实际文件总数:        7

其中:

病毒: 1
未知: 6

识别率为: 14%

allinwonderi

all to lab

Joker

[0] Archive type: RAR
    --> Clicker5.4.Hidden.exe
      [DETECTION] Contains HEUR/Malware suspicious code
    --> clicker5.4.Hidden0.exe
      [DETECTION] Contains HEUR/Malware suspicious code
    --> Clicker5.4.Visual.exe
      [DETECTION] Contains HEUR/Malware suspicious code
    --> clicker5.4.Visual0.exe
      [DETECTION] Contains HEUR/Malware suspicious code
    --> clicker5.5.Hidden.exe
      [DETECTION] Contains HEUR/Malware suspicious code
    --> clicker5.5.Visual.exe
      [DETECTION] Is the TR/PSW.Delf.cvg Trojan
    --> w.exe
      [DETECTION] Contains HEUR/Malware suspicious code
    [WARNING]   The file was ignored!
全启发，，壮观

JusticeH

BitDefender AntiVirus 2009
found: clicker5.5.Visual.exe Trojan.Generic.1217059
其餘6個上報

08红伞威点

File ID  Filename Size (Byte) Result
25219257  x6.rar 382.49 KB OK
---------------------------------------------------------
红伞上报6个启发。

Start of the scan: 2008年12月26日  21:36
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\文件'
C:\Documents and Settings\***\桌面\文件\Clicker5.4.Hidden.exe
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '49bdde4a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\clicker5.4.Hidden0.exe
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '49bdde4b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\Clicker5.4.Visual.exe
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '48d8569c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\clicker5.4.Visual0.exe
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '49bdde4d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\clicker5.5.Hidden.exe
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '49bdde4c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\clicker5.5.Visual.exe
    [DETECTION] Is the TR/PSW.Delf.cvg Trojan
    [NOTE]      A backup was created as '48d8569d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\w.exe
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '49b9de0e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年12月26日  21:36
Used time: 00:06 Minute(s)

The scan has been done completely.

      1 Scanning directories
      7 Files were scanned
      1 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      7 files were deleted
      0 files were repaired
      7 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      7 Notes

wangjay1980

Hello,

23002.exe_ - Trojan.Win32.Agent.baek,

clicker5.4.Hidden0.exe_ - Trojan-PSW.Win32.Delf.dbg,

clicker5.4.Visual0.exe_ - Trojan-PSW.Win32.Delf.dbh,

pdf.pdf_ - Exploit.Win32.Pidief.zv

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Love=卡巴+费尔