5x kaba miss,to kill !

显示全部楼层 · 发表于 2009-5-12 06:52:42

用沙盘抓到得几个...（删除一个没有恶意行为的样本 >qvod3.exe)

Hello,

aec.SYS - Trojan-Downloader.Win32.Geral.md,
fz5.exe_,scvhost.exe_ - Trojan-Downloader.Win32.Geral.me,
killdll.dll - Trojan-Downloader.Win32.Geral.mf

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

[ 本帖最后由幸福的猪猪于 2009-5-12 08:59 编辑 ]

显示全部楼层 · 发表于 2009-5-12 07:35:20

在上报一个TrojanClicker
kaba miss ,to kill !

[ 本帖最后由幸福的猪猪于 2009-5-12 07:44 编辑 ]

显示全部楼层 · 发表于 2009-5-12 07:35:26

Starting the file scan:

Begin scan in 'D:\kafan\fz5.exe'
D:\kafan\fz5.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\killdll.dll'
D:\kafan\killdll.dll
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\aec.SYS'
D:\kafan\aec.SYS
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\scvhost.exe'
D:\kafan\scvhost.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!

End of the scan: 2009年5月12日  07:37
Used time: 00:01 Minute(s)

The scan has been done completely.

   0 Scanned directories
   4 Files were scanned
   4 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   4 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   4 Notes

显示全部楼层 · 发表于 2009-5-12 08:25:57

****************** Sophos Anti-Virus 日志记录 - 2009-5-12 0:25:15 **************

...
20090512 002336 在 'http://bbs.kafan.cn/attachment.php?aid=533127&k=855c915b1238601e5a16bc02667e1adc&t=1242087758' 中检测到病毒/间谍软件 'Mal/Mdrop-N' 。
...
20090512 002403 在 'http://bbs.kafan.cn/attachment.php?aid=533128&k=359f63e79f148f506c9a3879172e45eb&t=1242087758' 中检测到病毒/间谍软件 'Mal/KillAV-B' 。
...
20090512 002428 在 'http://bbs.kafan.cn/attachment.php?aid=533134&k=709628c4f461e9e70ed5daa21c7e6688&t=1242087758' 中检测到病毒/间谍软件 'Mal/Mdrop-N' 。
...
(3 个项目)

最后一个TDDOWNLOAD.zip Sophos 启发，报可疑

[ 本帖最后由 jochelliu 于 2009-5-12 08:27 编辑 ]

显示全部楼层 · 发表于 2009-5-12 08:29:54

小红伞杀了。

显示全部楼层 · 发表于 2009-5-12 08:33:01

微点杀毒，全杀

显示全部楼层 · 发表于 2009-5-12 10:29:07

2009-05-12 10:28:08 gxf 3424 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\110\drive.zip\scvhost.exe\[UPX]\[Embedded_Ra#0ff30]" file.
2009-05-12 10:28:11 gxf 3424 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\110\fz5.zip\fz5.exe\[UPX]\[Embedded_Ra#0ff30]" file.

显示全部楼层 · 发表于 2009-5-12 11:15:36

原帖由 幸福的猪猪 于 2009-5-12 07:35 发表
在上报一个TrojanClicker
kaba miss ,to kill !

Hello,

tt.exe - Trojan-Downloader.Win32.Agent.bxix

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2009-5-12 12:32:43

显示全部楼层 · 发表于 2009-5-12 12:33:35

你的tt在那里來?

[病毒样本] 5x kaba miss,to kill !

本帖子中包含更多资源

本帖子中包含更多资源

avast4.8

本帖子中包含更多资源

回复 8楼 328397663 的帖子