PDF+Downloader

qianwenxiang

堆了2天了

allinwonderi

[Scanning : C:\Test]


C:\Test\loader.rar<RAR>:xloader.exe <- Downloader.Small.Ahjs : No action



Scanned objects : 3

Infected objects : 1

allinwonderi

看大小就知道是Small了

wangjay1980

PDF TO KL

syfwxmh

kaspersky miss 1
to kl

luxiao200888

Trojan-Downloader.Win32.Small.ahjs

挪威的冬天

信息        2008-12-26  20:46:02        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-12-26  20:46:02        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个                       
信息        2008-12-26  20:46:02        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-12-26  20:46:02        D:\Desktop\loader\xloader.exe        Win32.TrojDownloader.Small.9728        跳过，未处理       

金山毒霸可信认证查询结果如下:

报告生成于:   2008/12/26 20:45

xloader.exe      --------      可疑的


pdf.pdf      --------      未知


理论文件总数:        2
实际文件总数:        2

其中:

可疑的: 1
未知: 1

识别率为: 50%

JusticeH

BitDefender AntiVirus 2009
Found:
loader.rar=]pdf.pdf=](JAVASCRIPT) Exploit.RealPlr.K
loader.rar=]xloader.exe Trojan.Zlob.2.Gen

08红伞威点

Start of the scan: 2008年12月26日  21:53
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\文件'
C:\Documents and Settings\***\桌面\文件\pdf.pdf
    [0] Archive type: PDF Stream
    --> Object
      [DETECTION] Contains recognition pattern of the JS/Bofra.A.1 Java script virus
    [NOTE]      A backup was created as '49bae23a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\xloader.exe
    [DETECTION] Is the TR/Dldr.Small.ahjs Trojan
    [NOTE]      A backup was created as '49c3e242.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年12月26日  21:53
Used time: 00:04 Minute(s)

The scan has been done completely.

      1 Scanning directories
      2 Files were scanned
      2 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      2 Notes
----------------------------------------------------------------------------
红伞S版（库V7.01.01.37）杀。

wangjay1980

Hello,

23002.exe_ - Trojan.Win32.Agent.baek,

clicker5.4.Hidden0.exe_ - Trojan-PSW.Win32.Delf.dbg,

clicker5.4.Visual0.exe_ - Trojan-PSW.Win32.Delf.dbh,

pdf.pdf_ - Exploit.Win32.Pidief.zv

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.