1

killloop

网址收集乱了，也不知道是更新了还是什么，

开新帖。 VT上有人扫过


http://camas.comodo.com/cgi-bin/submit?file=0e4ada8fa573f35239214c6443bd6966d13d082010d514687b670755cdff16fc

扫描结果 :	11%的杀软(4/37)报告发现病毒
时间 :	2009/08/11 19:51:45 (CST)

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.5.0.3	20090811000225	2009-08-11	-	0.385
AntiVir	8.2.0.248	7.1.5.94	2009-08-11	-	0.263
Arcavir	2009	200908110751	2009-08-11	Heur.W32	0.068
Authentium	5.1.1	200908102238	2009-08-10	-	1.209
AVAST!	4.7.4	090810-0	2009-08-10	-	0.015
AVG	8.5.288	270.13.50/2296	2009-08-11	-	2.347
BitDefender	7.81008.3835654	7.27109	2009-08-11	-	3.503
CA (VET)	9.0.0.143	31.6.6670	2009-08-11	-	3.172
ClamAV	0.95.2	9675	2009-08-11	-	0.046
Comodo	3.10	1941	2009-08-11	Heur.Suspicious	0.768
CP Secure	1.1.0.715	2009.08.11	2009-08-11	Generic.W32	12.965
Dr.Web	4.44.0.9170	2009.08.11	2009-08-11	-	7.409
F-Prot	4.4.4.56	20090810	2009-08-10	-	1.272
F-Secure	7.02.73807	2009.08.11.08	2009-08-11	-	0.101
GData	19.7023/19.435	20090811	2009-08-11	-	5.039
Ikarus	T3.1.01.64	2009.08.11.73219	2009-08-11	-	3.674
Microsoft	1.4903	2009.08.11	2009-08-11	-	6.563
Norman	6.01.09	6.01.00	2009-08-10	-	4.007
nProtect	20090809.01	4982391	2009-08-09	-	7.826
Quick Heal	10.00	2009.08.11	2009-08-11	Suspicious - DNAScan	1.201
Sophos	2.89.1	4.44	2009-08-11	-	2.961
Sunbelt	5323	5323	2009-08-10	-	1.599
The Hacker	6.3.4.3	v00380	2009-08-10	-	0.861
VBA32	3.12.10.9	20090810.1232	2009-08-10	-	2.270
ViRobot	20090811	2009.08.11	2009-08-11	-	0.446
VirusBuster	4.5.11.10	10.112.1/1844782	2009-08-10	-	2.337
卡巴斯基	5.5.10	2009.08.11	2009-08-11	-	0.055
安博士V3	2009.08.11.00	2009.08.11	2009-08-11	-	1.417
安天	2.0.18	20090810.2695746	2009-08-10	-	0.118
江民杀毒	11.0.800	2009.08.11	2009-08-11	-	3.581
熊猫卫士	9.05.01	2009.08.10	2009-08-10	-	1.846
瑞星	20.0	21.42.13.00	2009-08-11	-	1.757
赛门铁克	1.3.0.24	20090810.003	2009-08-10	-	0.057
趋势科技	8.700-1004	6.356.01	2009-08-11	-	0.040
迈克菲	5.3.00	5705	2009-08-10	-	3.130
金山毒霸	2009.2.5.15	2009.8.11.14	2009-08-11	-	0.517
飞塔	2.81-3.120	10.691	2009-08-07	-	0.435

悠柚

to IObit

lingbo110120

可能干净...没分析过...猜的

oy-ll

2009-08-11 20:13:31        文件保护(修改文件)     操作:阻止
进程路径:D:\My Documents\1\1.exe
文件路径:C:\WINDOWS\system32\drivers\etc\hosts
2009-08-11 20:13:47        应用程序保护(访问服务管理器)     操作:阻止
进程路径:D:\My Documents\1\1.exe
2009-08-11 20:13:50        应用程序保护(访问服务管理器)     操作:阻止
进程路径:D:\My Documents\1\1.exe

lingbo110120

感谢分析 上报

sam.to

TO KL,LL

尤金卡巴斯基

Hello,

1.exe_ - Trojan.Win32.Qhost.lvq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.



Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

sam.to

效率

sam.to

我剛收到....

尤金卡巴斯基

后上报倒先收到回信