some

显示全部楼层 · 发表于 2009-5-22 20:25:08

Hello,

smss.exe,
svchost.exe,
taskmgr.exe - Worm.Win32.AutoRun.fxe
wab32.exe - Trojan.Win32.Agent.cihw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2009-5-22 20:26:18

MP kill all

显示全部楼层 · 发表于 2009-5-22 20:28:08

wab32 nis不报

显示全部楼层 · 发表于 2009-5-22 20:38:33

MISS wab32
File scanned: D:\virus\5\smss.exe - SIGNATURE FOUND "Virus.Win32.Alman.b"
File scanned: D:\virus\5\svchost.exe - SIGNATURE FOUND "Virus.Win32.Alman.b"
File scanned: D:\virus\5\taskmgr.exe - SIGNATURE FOUND "Virus.Win32.Alman.b"

显示全部楼层 · 发表于 2009-5-22 20:53:22

H:\5.rar
  [0] Archive type: RAR
--> taskmgr.exe
   [DETECTION] Contains code of the W32/Almanahe.B Windows virus
--> smss.exe
   [DETECTION] Contains code of the W32/Almanahe.B Windows virus
--> svchost.exe
   [DETECTION] Contains code of the W32/Almanahe.B Windows virus

显示全部楼层 · 发表于 2009-5-22 20:54:34

The file 'H:\wab32.rar'
contained a virus or unwanted program 'HEUR/Malware' [heuristic]
启发，上报。

显示全部楼层 · 发表于 2009-5-22 20:54:44

Starting the file scan:

Begin scan in 'D:\kafan\wab32.rar'
D:\kafan\wab32.rar
  [0] Archive type: RAR
--> wab32.exe
   [DETECTION] Contains HEUR/Malware suspicious code
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\smss.exe'
D:\kafan\smss.exe
[DETECTION] Contains code of the W32/Almanahe.B Windows virus
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\svchost.exe'
D:\kafan\svchost.exe
[DETECTION] Contains code of the W32/Almanahe.B Windows virus
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\taskmgr.exe'
D:\kafan\taskmgr.exe
[DETECTION] Contains code of the W32/Almanahe.B Windows virus
[NOTE]    The file was deleted!

End of the scan: 2009年5月22日  20:56
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   5 Files were scanned
   3 Viruses and/or unwanted programs were found
   1 Files were classified as suspicious
   4 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   4 Notes

显示全部楼层 · 发表于 2009-5-22 21:05:28

Result: 4 malware found

Win32.Lopown.A (virus)
D:\我的文档\DOWNLOADS\WAB32\SMSS.EXE Action: deleted
D:\我的文档\DOWNLOADS\WAB32\TASKMGR.EXE Action: deleted
D:\我的文档\DOWNLOADS\WAB32\SVCHOST.EXE Action: deleted
Trojan.Downloader.JLUB (virus)
D:\我的文档\DOWNLOADS\WAB32\WAB32.EXE Action: deleted

显示全部楼层 · 发表于 2009-5-22 21:21:09

卡巴不报

显示全部楼层 · 发表于 2009-5-22 21:25:51

McAfee 报了4个。。

[病毒样本] some

本帖子中包含更多资源