3x

qianwenxiang

2x From: http://bbs.kafan.cn/redirect.php?tid=403543&goto=lastpost#lastpost

附带挖到的那个Zlob

woai_jolin

http://bbs.kafan.cn/attachment.p ... ae&t=1231493512        multiple threats        deleted (after the next restart) - quarantined       
http://bbs.kafan.cn/attachment.p ... ae&t=1231493512 » RAR » SpywareGuard2008.exe        a variant of Win32/Kryptik.EH trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... ae&t=1231493512 » RAR » wmpcdcs.exe        multiple threats        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... ae&t=1231493512 » RAR » wmpcdcs.exe » NSIS » Entries.bin        is OK               
http://bbs.kafan.cn/attachment.p ... ae&t=1231493512 » RAR » wmpcdcs.exe » NSIS » Strings.txt        is OK               
http://bbs.kafan.cn/attachment.p ... ae&t=1231493512 » RAR » wmpcdcs.exe » NSIS » 龐

dreams521

1 TO KL

c5132902

dreams521

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Sherry.ai

To KL
1x

Kitman

Begin scan in 'C:\Users\Kitman\Desktop\10_4'
C:\Users\Kitman\Desktop\10_4\a01.css
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49982347.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\Kitman\Desktop\10_4\SpywareGuard2008.exe
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
    [NOTE]      A backup was created as '49e02387.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\Kitman\Desktop\10_4\wmpcdcs.exe
    [DETECTION] Contains recognition pattern of the DR/Zlob.Gen dropper
    [NOTE]      A backup was created as '49d72384.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

allinwonderi

[Scanning : C:\Test]


C:\Test\10_4.rar<RAR>:a01.css<UPX>:a01.css <- Trojan.Agent.Attv : No action



Scanned objects : 9

Infected objects : 1

allinwonderi

无尽藏海