再找到3个,真的很累

显示全部楼层 · 发表于 2009-2-22 18:59:57

费尔1个 TrojanDownloader.Mnless.chk.llmo

显示全部楼层 · 发表于 2009-2-22 19:15:45

卡8
Kill 1

显示全部楼层 · 发表于 2009-2-22 20:01:58

Begin scan in 'C:\Users\Kitman\Desktop\3'
C:\Users\Kitman\Desktop\3\ldr.exe3
[DETECTION] Is the TR/Spy.ZBot.JHS Trojan
[NOTE] A backup was created as '4a133e7c.qua' ( QUARANTINE )
[NOTE] The file was deleted!

to

显示全部楼层 · 发表于 2009-2-22 20:46:47

Hello,

ldr.exe1 - Trojan-Spy.Win32.Zbot.nww,
ldr.exe_ - Trojan-Spy.Win32.Zbot.nvb,
ok.exe_ - Trojan-Downloader.Win32.Agent.bilg

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-2-22 21:05:26

SEP启发掉了第二个

显示全部楼层 · 发表于 2009-2-22 21:07:39

原帖由左手于 2009-2-22 17:43 发表
2009-02-22 17:42:58 修改注册表内容操作:阻止
进程路径:E:\virus\ldr.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:AppData
触发 ...

Hello,

twex.exe - Trojan-Spy.Win32.Zbot.nww
New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由尤金卡巴斯基于 2009-2-22 21:09 编辑 ]

[病毒样本] 再找到3个,真的很累

评分