若干个……

显示全部楼层 · 发表于 2009-5-8 07:44:29

kaba miss .to kill !

Hello,

AnX.exe_, AvticnX.exe_ - Trojan-Downloader.Win32.Geral.kq

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

[ 本帖最后由幸福的猪猪于 2009-5-8 07:54 编辑 ]

显示全部楼层 · 发表于 2009-5-8 07:51:03

Starting the file scan:

Begin scan in 'D:\kafan\dfsgsdf0.exe'
D:\kafan\dfsgsdf0.exe
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '4a767424.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\qvod310.exe'
D:\kafan\qvod310.exe
[DETECTION] Is the TR/Dldr.Agent.xsd Trojan
[NOTE]    A backup was created as '4a727436.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\system32'
Begin scan in 'D:\kafan\1.exe'
D:\kafan\1.exe
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '4a6873ee.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\TDDOWNLOAD'
D:\kafan\TDDOWNLOAD\AnX.exe
--> Object
   [DETECTION] Is the TR/Killav.PN Trojan
[NOTE]    A backup was created as '4a5b742e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
D:\kafan\TDDOWNLOAD\AvticnX.exe
--> Object
   [DETECTION] Is the TR/Killav.PN Trojan
[NOTE]    A backup was created as '4a777437.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年5月8日  07:50
Used time: 00:03 Minute(s)

The scan has been done completely.

   2 Scanned directories
   7 Files were scanned
   5 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   5 files were deleted
   0 Viruses and unwanted programs were repaired
   5 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   0 Archives were scanned
   0 Warnings
   5 Notes

显示全部楼层 · 发表于 2009-5-8 08:40:51

第二和第四个费尔扫描无反应，上报！

显示全部楼层 · 发表于 2009-5-8 08:41:46

2009-05-08 8:33:28 SYSTEM 1540 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "http://bbs.kafan.cn/attachment.php?aid=530307&k=c14fbad6c22e17192ca0ed350e08068e&t=1241742797\dfsgsdf0.exe\[NsPack]\[Embedded_Ra#043ec]\[Embedded_Ia#0c490]" file.
2009-05-08 8:33:54 SYSTEM 1540 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "http://bbs.kafan.cn/attachment.php?aid=530307&k=c14fbad6c22e17192ca0ed350e08068e&t=1241742797\dfsgsdf0.exe\[NsPack]\[Embedded_Ra#043ec]\[Embedded_Ia#0c490]" file.
2009-05-08 8:40:22 gxf 2900 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\Temp\dfsgsdf0.exe\[NsPack]\[Embedded_Ra#043ec]\[Embedded_Ia#0c490]" file.
2009-05-08 8:40:24 gxf 2900 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\Temp\1.exe\[NsPack]\[Embedded_Ra#043ec]\[Embedded_Ia#0c490]" file.
2009-05-08 8:40:26 gxf 2900 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\Temp\TDDOWNLOAD\AnX.exe\[UPX]\[Embedded_Ra#0fc60]" file.
2009-05-08 8:40:28 gxf 2900 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\Temp\TDDOWNLOAD\AvticnX.exe\[UPX]\[Embedded_Ra#0fc60]" file.

显示全部楼层 · 发表于 2009-5-8 21:32:02

to McAfee

[病毒样本] 若干个……

本帖子中包含更多资源

avast4.8