Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

显示全部楼层 · 发表于 2009-9-2 06:15:53

Update

显示全部楼层 · 发表于 2009-9-2 08:18:27

189 avira kill it
Begin scan in 'G:\Virus\dzh_2009v5(189)'
G:\Virus\dzh_2009v5(189)\1E63A83A36D17C7A9D8C60183922D1D9.exe
  [0] Archive type: NSIS
--> [TempDir]/lqbzse.exe
   [DETECTION] Is the TR/Drop.Agent.PAL Trojan
--> [TempDir]/svehost.exe
   [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
--> [TempDir]/selvice.exe
   [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
--> [TempDir]/syseter.exe
   [DETECTION] Is the TR/BHO.yme Trojan
--> [TempDir]/small696.exe
   --> Object
      [DETECTION] Is the TR/Drop.Agent.NAE.1 Trojan
--> [TempDir]/llly9.exe
   [1] Archive type: NSIS
   --> [UnknownDir]/cc.exe
      [DETECTION] Contains recognition pattern of the BAT/Ftp.79 batch virus
   --> [UnknownDir]/iexplorer.exe
      [DETECTION] Is the TR/Agent.aes Trojan
   --> [UnknownDir]/sysmain.dat
      [DETECTION] Is the TR/Spy.Agent.azem Trojan
   --> [UnknownDir]/sysvc.dat
      [DETECTION] Is the TR/Downloader.Gen Trojan
--> [TempDir]/explor.exe
   [1] Archive type: NSIS
   [DETECTION] Contains recognition pattern of the DR/IETimbar.jjb dropper
   --> Software//Microsoft//Windows//CurrentVersion//Explorer//Browser Helper Objects//{489873CE-F3E1-44A3-8E89-04BE26BE4446}/IETimbar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/IETimbar adware or spyware

显示全部楼层 · 发表于 2009-9-2 08:23:32

ZAAV miss，to kl

显示全部楼层 · 发表于 2009-9-2 09:10:19

Hello,

3922D1D9.exe_1 - Trojan-Dropper.Win32.Agent.bbwd,
llly9.exe_11 - Trojan-Dropper.Win32.Agent.bbtr,
selvice.exe_11 - Trojan-Downloader.Win32.Agent.cnwp,
syseter.exe_11 - Trojan.Win32.Bho.yme

These files are already detected. Please update your antivirus bases.

Color.exe_11, explor.exe_11

No malicious code were found in these files.

lqbzse.exe_11 - Trojan-Dropper.Win32.Agent.bbvy,
small696.exe_11 - Trojan-Dropper.Win32.Agent.bbwd,
svehost.exe_11 - Trojan.Win32.Buzus.bxlt

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

> password：infected
>
-----------------
Regards, Vitaly Butuzov
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700

ZAAV的病毒库还是比卡巴稍微慢一点

显示全部楼层 · 发表于 2009-9-2 10:15:29

瑞星2010

显示全部楼层 · 发表于 2009-9-2 10:26:03

9月2号更新Win32:Small-ERC [Trj]

显示全部楼层 · 发表于 2009-9-2 18:18:52

Update

显示全部楼层 · 发表于 2009-9-2 22:13:55

瑞星2010

显示全部楼层 · 发表于 2009-9-2 22:30:11

瑞信测试版？

显示全部楼层 · 发表于 2009-9-3 17:24:33

Update

[病毒样本] Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

本帖子中包含更多资源

本帖子中包含更多资源