New ! 今天发现的！

显示全部楼层 · 发表于 2009-1-12 21:11:28

New ! 今天发现的！

显示全部楼层 · 发表于 2009-1-12 21:13:14

[Scanning : C:\Test]

C:\Test\Bingdu.rar<RAR>:autorun.inf <- Worm.Autorun.Dvw : No action
C:\Test\Bingdu.rar<RAR>:　　　.exe <- Downloader.Delf.Qmt : No action

显示全部楼层 · 发表于 2009-1-12 21:14:13

其余未报

显示全部楼层 · 发表于 2009-1-12 21:14:30

红伞直接报壳杀

显示全部楼层 · 发表于 2009-1-12 21:14:49

显示全部楼层 · 发表于 2009-1-12 21:21:25

TO KL

显示全部楼层 · 发表于 2009-1-12 21:28:49

avast!

显示全部楼层 · 发表于 2009-1-12 21:30:44

ESET
\autorun.inf - Win32/Fujacks.BH 病毒
C:\Documents and Settings\Administrator\桌面\Bingdu.rar > RAR > Bingdu\　　　.exe - Win32/Fujacks 病毒
C:\Documents and Settings\Administrator\桌面\Bingdu.rar > RAR > Bingdu\16888.exe - Win32/Kryptik.AE 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\Bingdu.rar > RAR > Bingdu\TXPlatform.exe - Win32/Fujacks 病毒
C:\Documents and Settings\Administrator\桌面\Bingdu.rar > RAR > Bingdu\16888[1].exe - Win32/Kryptik.AE 特洛伊木马的变种

显示全部楼层 · 发表于 2009-1-12 22:01:44

Hello.

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.
16888.exe - Trojan-PSW.Win32.QQPass.fee

显示全部楼层 · 发表于 2009-1-12 22:55:53

Start of the scan: 2009年1月12日  22:50
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\文件'
C:\Documents and Settings\***\桌面\文件\Bingdu\16888.exe
[DETECTION] Contains HEUR/Crypted suspicious code
[NOTE]    The detection was classified as suspicious.
[NOTE]    A backup was created as '49a358e2.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\Bingdu\16888[1].exe
[DETECTION] Contains HEUR/Crypted suspicious code
[NOTE]    The detection was classified as suspicious.
[NOTE]    A backup was created as '49a358e3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\Bingdu\autorun.inf
[DETECTION] Contains recognition pattern of the WORM/Autorun.dvw worm
[NOTE]    A backup was created as '49df5922.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\Bingdu\TXPlatform.exe
[DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
[NOTE]    A backup was created as '49bb5905.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\Bingdu\　　　.exe
[DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
[NOTE]    A backup was created as '796b88ae.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年1月12日  22:50
Used time: 00:05 Minute(s)

The scan has been done completely.

   2 Scanning directories
   7 Files were scanned
   3 viruses and/or unwanted programs were found
   2 Files were classified as suspicious:
   5 files were deleted
   0 files were repaired
   5 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   0 Archives were scanned
   0 Warnings
   5 Notes------------------------红伞(库V7.01.01.96)。

------------------------------------------------------------------------------------------------------------------
to Avira

File ID  Filename Size (Byte) Result
1299565  CDAC11BA.EXE  53.5 KB  CLEAN
25230448  CDAC13BA.EXE  22.5 KB  UNDER ANALYSIS

[病毒样本] New ! 今天发现的！

本帖子中包含更多资源

ArcaVir 2008

本帖子中包含更多资源

Norman Virus Control 5.99

本帖子中包含更多资源

本帖子中包含更多资源