卡巴报高危(9楼有大量高危生成)

显示全部楼层 · 发表于 2009-2-14 15:47:00

TO KL

显示全部楼层 · 发表于 2009-2-14 15:49:05

Begin scan in 'D:\-----Marsu-fix2.5_x32.rar'
D:\-----Marsu-fix2.5_x32.rar
D:\-----Marsu-fix2.5_x32.rar
[0] Archive type: RAR
   --> Marsu-fix2.5_x32\cisvc.exe2
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Contains HEUR/Malware suspicious code
[NOTE]    A backup was created as '49c3777f.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-14 15:49:35

to VB

显示全部楼层 · 发表于 2009-2-14 15:51:32

File ID    Filename    Size (Byte) Result
25261051    pps.ex2e    280 KB    UNDER ANALYSIS
25261052    cisvc.exe2    228 KB    UNDER ANALYSIS
25261053    install.e2xe    16 KB    UNDER ANALYSIS
3801834    RICHTX32.O2CX    199.2 KB    CLEAN
25261054    shdocvw.oca    61 KB    UNDER ANALYSIS
25261055    Vb6.olb    289.52 KB    UNDER ANALYSIS
25261056    Vb6ide.d2ll    978.77 KB    UNDER ANALYSIS
25261057    Vbaexe6.lib    1.05 KB    UNDER ANALYSIS
25261058    ~DF6D99.tmp    16 KB    UNDER ANALYSIS
1295956    Mspdb60.dll2    176.05 KB    KNOWN CLEAN
1295983    RCDLL.DL2L    105.27 KB    KNOWN CLEAN
4828612    Vb6debug.dl2l    13.77 KB    KNOWN CLEAN

显示全部楼层 · 发表于 2009-2-14 16:19:52

Hello,

hex_fixedinstall.e2xe - Trojan.Win32.VB.jvg

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.
> thanks 1X
>
> ________________________________
> 免费送你钻戒作情人节礼物<http://love.mail.163.com/valentine/main.do>
>
Regards, Mikhail Bulgakov
Virus Analyst
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-2-14 16:30:54

AVIRA生成物MISS

[ 本帖最后由一下子丫于 2009-2-14 16:33 编辑 ]

显示全部楼层 · 发表于 2009-2-14 17:10:19

瑞星全miss

sam.to真好

显示全部楼层 · 发表于 2009-2-14 17:36:22

TO DW

显示全部楼层 · 发表于 2009-2-14 17:37:33

TO AVG

显示全部楼层 · 发表于 2009-2-14 17:37:50

To McAfee

[病毒样本] 卡巴报高危(9楼有大量高危生成)

回复 9楼 sam.to 的帖子

回复 9楼 sam.to 的帖子

回复 9楼 sam.to 的帖子

回复 1楼 sam.to 的帖子

本帖子中包含更多资源

回复 9楼 sam.to 的帖子

浏览过的版块