7个

qianwenxiang

发现七个广告 思密达

http://www.pointway.co.kr/Application/Access.php?info=i&MyValue=&code=clubbox
http://pointway.co.kr/Info/Application/clubbox/ControlPointWay.exe
http://pointway.co.kr/Info/PointWayU/PointWayU.exe
http://turfant.co.kr/bVersion/updatecheck.exe
http://mypoints.kr/program/mypoint.exe
http://mypoints.kr/program/mypoint_update.exe
http://mypoints.kr/program/mypoint_delete.exe
http://turfant.co.kr/bVersion/version.dat

尤金卡巴斯基

2009/3/12 22:16:24        已隔离        病毒 HEUR:Trojan.Win32.Generic        G:\Temp\Virus\kr.rar/ControlPointWay.exe               
2009/3/12 22:15:56        已清除        木马程序 Backdoor.Win32.Delf.ocw        G:\Temp\Virus\kr.rar/updatecheck.exe               
2009/3/12 22:15:56        已清除        木马程序 Trojan-Downloader.Win32.Agent.bjeq        G:\Temp\Virus\kr.rar/PointWayU.exe               
To KL

Palkia

在 C:\Documents and Settings\Administrator\桌面\PointWayU.exe 中发现 TrojanDownloader.Agent.bbcd 病毒, 已删除

[ 本帖最后由 Palkia 于 2009-3-12 22:24 编辑 ]

ledled

Name: Trojan.DL.Agent.HJVV
Type: Trojan

Description:


Files:
c:\users\administrator\desktop\pointwayu.exe

xiaoqiang305

江民kill one
上报

Palkia

偶上报了~

nosferatu

Begin scan in 'C:\Documents and Settings\Administrator\桌面\kr'
C:\Documents and Settings\Administrator\桌面\kr\ControlPointWay.exe
    [DETECTION] Is the TR/Dldr.Agent.gtr.1 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\kr\PointWayU.exe
    [DETECTION] Is the TR/Dldr.Agent.bjeq Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\kr\updatecheck.exe
    [DETECTION] Is the TR/Buzus.iij Trojan
    [NOTE]      The file was deleted!
File ID          Filename          Size (Byte)         Result
25286139          mypoint.exe          264 KB          UNDER ANALYSIS
25286140          mypoint_delete.exe          226 KB          UNDER ANALYSIS
25275583          mypoint_update.exe          204.5 KB          CLEAN
25286141          version.dat          203 KB          UNDER ANALYSIS

揍敌客

ik miss 1
- TO

尤金卡巴斯基

Hello,

ControlPointWay.exe_ - Trojan.Win32.Agent.bula,

mypoint.exe_ - Trojan-Clicker.Win32.Agent.gws,

mypoint_update.exe_ - Trojan-Downloader.Win32.Delf.slv,

version.dat - Trojan-Downloader.Win32.Agent.bkrz

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

mypoint_delete.exe_ - not-a-virus:AdWare.Win32.DirectWeb.o

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Vitaly Butuzov
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

sam.to

上报下载点到卡巴