最近疯传的 MSDOS.bat 病毒最新版本

Sebastian

Starting the file scan:

Begin scan in 'D:\new\0.exe'
D:\new\0.exe
    [DETECTION] This file has been compressed using unusual runtime compression (PCK/UPACK). Please verify the origin of this file.
    [NOTE]      A backup was created as '4a35bf37.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\1.exe'
D:\new\1.exe
  [0] Archive type: NSIS
    [DETECTION] Is the TR/Dldr.QQHelper.bsy Trojan
    --> main/mscg24.exe
      [1] Archive type: RSRC
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4b460368.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\3.exe'
D:\new\3.exe
    [DETECTION] Is the TR/Obfuscated.KU.378 Trojan
    [NOTE]      A backup was created as '4a35bf38.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\4.exe'
D:\new\4.exe
    [DETECTION] Is the TR/Drop.Cinmus.acrn Trojan
    --> 52D77ECE7B32424dB93B9A6EFBDDB0DF/[TempDir]/98.exe
      [DETECTION] Contains recognition pattern of the DR/Cinmus.akrn dropper
    [NOTE]      A backup was created as '4b460369.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\5.exe'
D:\new\5.exe
    [DETECTION] Is the TR/Vundo.Gen Trojan
    [NOTE]      A backup was created as '4a35bf3a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\9.exe'


End of the scan: 2009年3月30日  20:46
Used time: 00:02 Minute(s)

The scan has been done completely.

      0 Scanned directories
     10 Files were scanned
      7 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      5 files were deleted
      0 Viruses and unwanted programs were repaired
      5 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      2 Archives were scanned
      0 Warnings
      5 Notes

yuliguo2001

nod2.7 直接删除

Sherry.ai

这个不是最新滴…寒

wcyxj123

卡巴报！！！！！

SUZAKU

卡巴斯基杀毒报告

扫描文件数：4

查杀（病毒、木马）数：1

详细杀毒报告列表：


2009-3-30 22:36:16        已删除: Worm.Win32.AutoRun.yze        C:\Documents and Settings\Try\桌面\新建文件夹\2009年3月30日病毒样本（四中）.rar/MSDOS.bat               

尤金卡巴斯基

原帖由 Palkia 于 2009-3-30 20:33 发表
下到的打包~6x

To KL

aerbeisi

Sign of "Win32:Trojan-gen {Other}" has been found in "F:\桌面.zip\0.exe\[Embedded_O#0a4ac]" file.  
Sign of "Win32:Trojan-gen {Other}" has been found in "F:\桌面.zip\0.exe\[Embedded_I#0e4ba]" file.  
Sign of "Win32:Rootkit-gen [Rtk]" has been found in "F:\桌面.zip\0.exe" file.  
Sign of "Win32:Trojan-gen {Other}" has been found in "F:\桌面.zip\3.exe" file.  
Sign of "Win32:Adware-gen [Adw]" has been found in "F:\桌面.zip\4.exe" file.  
Sign of "Win32:Oliga [Trj]" has been found in "F:\桌面.zip\9.exe" file.

Dirk

这个应该不是什么新病毒了吧

ledled

Name: Otwycal
Type: Worm

Description:
A malicious software that replicates independently via LANs, Internet, e-mail, IRC channels, file-sharing networks, etc.

Files:
c:\users\administrator\desktop\msdos.bat

HKLHF

似乎蛮强悍的了！