[病毒样本] 1x

显示全部楼层 · 发表于 2009-1-6 23:52:34

启发隔离
To KL

[ 本帖最后由尤金卡巴斯基于 2009-1-6 23:54 编辑 ]

显示全部楼层 · 发表于 2009-1-6 23:55:19

Begin scan in 'D:\xx.rar'
D:\xx.rar
[0] Archive type: RAR
   --> xx.exe
      [DETECTION] Contains HEUR/Crypted suspicious code
[NOTE]    A backup was created as '49917f4c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
启发上报

显示全部楼层 · 发表于 2009-1-7 00:00:29

a-squared Anti-Malware - 版本 4.0
上次更新: 2009-1-6 18:54:54

扫描设置:

对象: C:\Documents and Settings\Administrator\桌面\xx.rar
扫描文件: 开
启发式扫描: 开
ADS 扫描: 开

扫描开始于: 2009-1-7 0:00:10

C:\Documents and Settings\Administrator\桌面\xx.rar/xx.exe 已检测: Backdoor.Win32.Ceckno!IK

已扫描

文件: 1
跟踪记录: 0
Cookies: 0
进程: 0

已发现

文件: 1
跟踪记录: 0
Cookies: 0
进程: 0
注册表键: 0

扫描结束于: 2009-1-7 0:00:10
扫描用时: 0:00:00

显示全部楼层 · 发表于 2009-1-7 00:10:57

Hello,

xx.exe_ - Worm.Win32.AutoRun.wsj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Andrey Ladikov
Virus Analyst, Kaspersky Lab.

显示全部楼层 · 发表于 2009-1-7 00:18:09

很快

显示全部楼层 · 发表于 2009-1-7 00:24:21

这个更快
http://bbs.kafan.cn/viewthread.p ... p;page=1#pid6122499

显示全部楼层 · 发表于 2009-1-7 01:15:46

已知

显示全部楼层 · 发表于 2009-1-7 01:27:27

BitDefender
報Win32.Worm.Autorun.PB

显示全部楼层 · 发表于 2009-1-7 11:45:04

显示全部楼层 · 发表于 2009-1-7 12:06:11

微点

[病毒样本] 1x

本帖子中包含更多资源

回复 5楼 sam.to 的帖子

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源