2个

显示全部楼层 · 发表于 2009-3-14 17:31:35

一个Parpas 一个Dropper
hp://bankofamerica.updateserver.statement.verification-zr50ar337.656certificate.com/index.html?/cookies/action=unzhs0utgi7f796

显示全部楼层 · 发表于 2009-3-14 17:34:30

to VB

显示全部楼层 · 发表于 2009-3-14 17:34:51

rs 0

显示全部楼层 · 发表于 2009-3-14 17:34:56

NIS miss 1

显示全部楼层 · 发表于 2009-3-14 17:45:46

上报KV09 1个

显示全部楼层 · 发表于 2009-3-14 17:47:42

Begin scan in 'D:\v2.rar'
D:\v2.rar
[0] Archive type: RAR
--> XProtect2.exe
   [DETECTION] Is the TR/Drop.Age.1024512 Trojan
[NOTE]    A backup was created as '49e97d64.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-3-14 17:58:04

NOD4.0一个也不报

显示全部楼层 · 发表于 2009-3-14 18:05:43

启发1
2009/3/14 18:05:25 已隔离病毒 HEUR:Trojan.Win32.Generic G:\Temp\Virus\v2.rar/Adobeflashplayer.exe
To KL

显示全部楼层 · 发表于 2009-3-14 18:07:35

to ik

显示全部楼层 · 发表于 2009-3-14 18:33:53

Hello,

eflashplayer.exe - Trojan-PSW.Win32.Papras.je
XProtect2.exe - Backdoor.Win32.Delf.ofw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Sincerely yours,
Gashkin Alex,
Virus Analyst.

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[病毒样本] 2个

本帖子中包含更多资源