2009.3.7 卡巴扫描不报。执行报。

killloop

下载：http://www.taozx.com/ANN.exe

Sebastian

Starting the file scan:

Begin scan in 'D:\ANN.exe'
D:\ANN.exe
    [0] Archive type: RAR SFX (self extracting)
    --> b1.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a005d7b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年3月7日  19:40
Used time: 00:11 Minute(s)

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

[ 本帖最后由 Sebastian 于 2009-3-7 19:40 编辑 ]

尤金卡巴斯基

To KL

[ 本帖最后由 尤金卡巴斯基 于 2009-3-7 19:46 编辑 ]

wsmurderer

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ANN.EXE
木马程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\B1.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEST.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\QRQWERWQER.DLL
4) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MEM.SCR
是否删除木马程序及其衍生物?

Palkia

rs gameol

darreol

迈克菲说病毒啦

kingmuro

过诺顿11.0

揍敌客

Sophos kill

ledled

VirusBuster found nothing

尤金卡巴斯基

Hello,

ANN.exe_ - Trojan-GameThief.Win32.WOW.gam

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.


Regards, Andrey Ladikov
Virus Analyst, Kaspersky Lab.

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com