[病毒样本] 1

显示全部楼层 · 发表于 2009-4-15 23:12:15

Sent to Avira
Antivirus Version Last Update Result
a-squared 4.0.0.101 2009.04.15 Packed.Win32.Krap!IK
AhnLab-V3 5.0.0.2 2009.04.15 -
AntiVir 7.9.0.143 2009.04.15 -
Antiy-AVL 2.0.3.1 2009.04.15 -
Authentium 5.1.2.4 2009.04.14 -
Avast 4.8.1335.0 2009.04.15 -
AVG 8.5.0.287 2009.04.15 PSW.OnlineGames_r.X
BitDefender 7.2 2009.04.15 Trojan.PWS.OnlineGames.KBWL
CAT-QuickHeal 10.00 2009.04.15 -
ClamAV 0.94.1 2009.04.15 -
Comodo 1115 2009.04.15 -
DrWeb 4.44.0.09170 2009.04.15 -
eSafe 7.0.17.0 2009.04.13 Suspicious File
eTrust-Vet 31.6.6455 2009.04.14 -
F-Prot 4.4.4.56 2009.04.14 -
F-Secure 8.0.14470.0 2009.04.15 -
Fortinet 3.117.0.0 2009.04.15 -
GData 19 2009.04.15 Trojan.PWS.OnlineGames.KBWL
Ikarus T3.1.1.49.0 2009.04.15 Packed.Win32.Krap
K7AntiVirus 7.10.704 2009.04.15 -
Kaspersky 7.0.0.125 2009.04.15 -
McAfee 5584 2009.04.14 -
McAfee+Artemis 5584 2009.04.14 -
McAfee-GW-Edition 6.7.6 2009.04.15 Trojan.Crypt.LooksLike.XPACK
Microsoft 1.4502 2009.04.15 Worm:Win32/Taterf.B
NOD32 4010 2009.04.15 -
Norman 6.00.06 2009.04.15 -
nProtect 2009.1.8.0 2009.04.15 -
Panda 10.0.0.14 2009.04.14 -
PCTools 4.4.2.0 2009.04.15 -
Prevx1 V2 2009.04.15 High Risk Cloaked Malware
Rising 21.25.24.00 2009.04.15 -
Sophos 4.40.0 2009.04.15 -
Sunbelt 3.2.1858.2 2009.04.15 -
Symantec 1.4.4.12 2009.04.15 -
TheHacker 6.3.4.0.309 2009.04.15 -
TrendMicro 8.700.0.1004 2009.04.15 -
VBA32 3.12.10.2 2009.04.12 -
ViRobot 2009.4.15.1694 2009.04.15 -
VirusBuster 4.6.5.0 2009.04.15 -

[ 本帖最后由 Kitman 于 2009-4-15 23:55 编辑 ]

显示全部楼层 · 发表于 2009-4-15 23:37:37

Original file name: kacsde.rar

Threat: Trojan.PWS.Wsgame.6879

Thank you for the cooperation.

--
Yours sincerely,
Virus Monitoring Service
Doctor Web Ltd.

显示全部楼层 · 发表于 2009-4-15 23:43:02

To KL

显示全部楼层 · 发表于 2009-4-16 12:04:56

Packed.Win32.Krap

显示全部楼层 · 发表于 2009-4-16 13:01:24

2009-04-16 13:00:55 创建文件操作:阻止并结束进程
进程路径:E:\virus\kacsde.exe
文件路径:C:\WINDOWS\system32\drivers\klif.sys
触发规则:应用程序规则->02-允许修改的程序->*.*->*\*.sys

显示全部楼层 · 发表于 2009-4-16 15:42:11

弄下来去Vrustotal试试

显示全部楼层 · 发表于 2009-4-17 21:46:34

to McAfee

显示全部楼层 · 发表于 2009-4-17 21:52:51

红伞运行'TR/Crypt.XPACK.Gen [trojan]'

显示全部楼层 · 发表于 2009-4-18 19:12:12

Hello,

kacsde.exe - Trojan-GameThief.Win32.Magania.ayyx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Best Regards, NewVirus

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[病毒样本] 1

本帖子中包含更多资源