N多..................135x（已经上传样本）

显示全部楼层 · 发表于 2009-8-13 23:14:31

Hello,

############.exe_,
explor.exe_,
ie.exe_,
jcin02.td.cfg,
Setup_QQ.exe_

No malicious code were found in these files.

001.exe_ - Trojan-PSW.Win32.QQPass.lis,

23.exe_ - Trojan-Downloader.Win32.Geral.bzc,

7.exe_ - Trojan-Downloader.Win32.Geral.bzg,

aa28.exe_ - Trojan-Downloader.Win32.Zlob.acrw

These files are already detected. Please update your antivirus bases.

10.exe_,
12.exe_,
13.exe_,
16.exe_,
18.exe_,
19.exe_,
2.exe_,
20.exe_,
22.exe_,
24.exe_,
25.exe_,
26.exe_,
27.exe_,
28.exe_,
29.exe_,
3.exe_,
30.exe_,
5.exe_,
8.exe_,
9.exe_ - Trojan-Dropper.Win32.Mudrop.cna,

a12.exe_ - Trojan.Win32.Agent2.chms,

ig.exe_ - Trojan-Downloader.Win32.Small.amay,

xx42.exe_ - Trojan-Downloader.Win32.Small.amaz,

za.exe_ - Trojan.Win32.Agent2.chmu

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Please quote all when answering.
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-8-14 02:30:53

"已完成扫描 ""外壳扩展扫描（Shell Extension Scan）""。"
"感染";"94";"94";"0"
"间谍软件";"7";"7";"0"
"信息";"22"
"选择要扫描的文件夹：";"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf;"
"扫描开始时间：";"2009年8月14日, 2:28:22"
"扫描完成时间：";"2009年8月14日, 2:29:24 (1 分钟 1 秒)"
"扫描的对象总数：";"159"
"启动此扫描的用户：";"Administrator"

"感染"
"文件";"感染";"结果"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\1.exe";"特洛伊木马 BackDoor.PcClient.2.Y";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\11.exe";"特洛伊木马 Downloader.Generic8.BHUN";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\14.exe";"特洛伊木马 Downloader.Generic8.BHUR";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\15.exe";"特洛伊木马 Downloader.Generic8.BHUS";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\1690.exe";"特洛伊木马 BackDoor.Generic_r.GE";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\18.exe";"特洛伊木马 KillAV.AED";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\23.exe";"特洛伊木马 Downloader.Generic8.BHUW";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a1.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a10.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a11.exe";"特洛伊木马 PSW.OnlineGames3.IWO";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a12.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a13.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a14.exe";"特洛伊木马 PSW.OnlineGames3.KNP";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a15.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a16.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a17.exe";"特洛伊木马 Dropper.Agent.NSC";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a18.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a19.exe";"特洛伊木马 PSW.OnlineGames3.JKZ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a2.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a20.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a21.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a22.exe";"特洛伊木马 PSW.OnlineGames3.IGU";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a3.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a4.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a5.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a6.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a8.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\a9.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa1.exe";"特洛伊木马 PSW.OnlineGames3.KNP";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa10.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa11.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa12.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa13.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa14.exe";"特洛伊木马 Generic14.SRD";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa15.exe";"特洛伊木马 Generic14.KUL";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa16.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa17.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa18.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa19.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa2.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa20.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa21.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa22.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa23.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa24.exe";"特洛伊木马 PSW.Generic7.UDE";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa27.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa28.exe";"特洛伊木马 Downloader.Generic8.BGWP";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa29.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa3.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa30.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa31.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa32.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa4.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa5.exe";"特洛伊木马 PSW.OnlineGames3.JKZ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa6.exe";"特洛伊木马 Dropper.Agent.NSC";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa7.exe";"特洛伊木马 PSW.OnlineGames3.KNP";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa8.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa9.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\ciji.css";"特洛伊木马 PSW.OnlineGames3.BBB";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\claen3.exe";"特洛伊木马 Generic14.MUM";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\fox.exe";"特洛伊木马 Generic14.HQY";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\ig.exe";"特洛伊木马 Downloader.Generic8.BHOZ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\ma.exe";"特洛伊木马 Downloader.Generic8.ASAU";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\mam.exe";"特洛伊木马 Agent2.PAJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\ms.exe";"特洛伊木马 Dropper.Agent.KVU";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\os41.exe";"特洛伊木马 Dropper.Generic.AUOF";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\r2.exe";"特洛伊木马 PSW.OnlineGames3.BBB";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\s3.exe";"特洛伊木马 Downloader.Generic8.BHSF";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\svchost(1).exe";"特洛伊木马 Downloader.Generic8.BHNL";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\svchost.exe";"特洛伊木马 Generic14.TAS";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\win.exe";"特洛伊木马 PSW.OnlineGames3.KBH";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\x2.css";"特洛伊木马 Downloader.Generic8.BGVC";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx11.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx12.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx13.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx14.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx15.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx16.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx17.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx18.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx19.exe";"特洛伊木马 Generic14.HIF";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx20.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx22.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx23.exe";"特洛伊木马 PSW.OnlineGames3.JKZ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx24.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx25.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx27.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx28.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx29.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx30.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx31.exe";"发现病毒 Packed.Rolex";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx32.exe";"特洛伊木马 Dropper.Agent.NNR";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\xx33.exe";"特洛伊木马 PSW.OnlineGames.2.AJ";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\za.exe";"特洛伊木马 Agent2.PFZ";"已移至病毒库"

"间谍软件"
"文件";"感染";"结果"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa25.exe";"广告软件 Generic4.FRO.dropper";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\aa25.exe:\$KA\38.exe";"广告软件 Generic4.FRO";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\ie.exe";"有潜在危害的程序 Downloader.VM";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\ie.exe:\$JF\IETimbar.dll";"有潜在危害的程序 Downloader.VM";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\lc.exe";"广告软件 Generic4.JHC.dropper";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\lc.exe:\$KA\108.exe";"广告软件 Generic4.JHC";"已移至病毒库"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\zz.exe";"有潜在危害的程序 Dialer.QGV";"已移至病毒库"

"信息"
"文件";"感染";"结果"
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\10.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\12.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\13.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\17.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\19.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\2.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\20.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\21.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\22.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\24.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\25.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\27.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\28.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\29.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\3.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\30.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\4.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\6.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\7.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\8.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\9.exe";"运行时间压缩 upack";""
"D:\Documents and Settings\Administrator\桌面\kf\kf\kf\kf\alg.exe";"运行时间压缩 upack";""

显示全部楼层 · 发表于 2009-8-14 12:20:35

微点还不错

显示全部楼层 · 发表于 2009-8-14 12:23:40

TO LL

显示全部楼层 · 发表于 2009-8-14 13:53:51

正好,试试传说中的启发之王能启发多少

显示全部楼层 · 发表于 2009-8-14 15:00:37

杀了看看有多多

显示全部楼层 · 发表于 2009-8-14 15:47:24

kav 09 killed 129
eav4.0 killed 138

显示全部楼层 · 发表于 2009-8-14 16:20:29

这是为什么呢？

[病毒样本] N多..................135x（已经上传样本）

本帖子中包含更多资源

回复 27楼 maxmara2 的帖子