lnk類型病毒，miss主流!!

wang5229

nis2010  杀之

牧羊老汉

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00398170.




We received the following archive files:



File ID  Filename Size (Byte) Result
25498432  4x.rar 4.49 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25498397  ys.lnk  2.03 KB  MALWARE
25498399  1w.lnk  2.01 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
ys.lnk  MALWARE

The file 'ys.lnk' has been determined to be 'MALWARE'. Our analysts named the threat EXP/lnk.BE. The term "EXP/" denotes malware that is able to detect and use certain security vulnerabilities whereby the attacker can get control of the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename Result
1w.lnk  MALWARE

The file '1w.lnk' has been determined to be 'MALWARE'. Our analysts named the threat EXP/lnk.BF. The term "EXP/" denotes malware that is able to detect and use certain security vulnerabilities whereby the attacker can get control of the system.Detection will be added to our virus definition file (VDF) with one of the next updates.


Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... z&incidentid=398170

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... rEJRZWHIfpWcfxK6yRz


Please note: If you have specific questions please address them to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

  文件名被我改了，怕德国人不知道怎么写中文
MALWARE=Malicious Software

[ 本帖最后由 牧羊老汉 于 2009-11-18 01:09 编辑 ]

avast!

MSE病毒库升级很慢，很正常地miss了……

451102995

淡定淡定～从你的报告看到骚护士都杀！！

左手

报毒～

ray1106

neutralized

尤金卡巴斯基

####.lnk,
####2.lnk - Trojan-Downloader.Win32.Pif.tt

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

loぴё冥シ楓

ALL TO KILL BY EAV
C:\Documents and Settings\Administrator\桌面\日本牛郎.rar > RAR > らセ??\らセ??.lnk - BAT/TrojanDownloader.Ftp.NGR 特洛伊木马
C:\Documents and Settings\Administrator\桌面\日本牛郎.rar > RAR > らセ??\らセ??2.lnk - BAT/TrojanDownloader.Ftp.NGR 特洛伊木马
C:\Documents and Settings\Administrator\桌面\笑話謎語.rar > RAR > ?杠良粂\?杠良粂.lnk - BAT/TrojanDownloader.Ftp.NGQ 特洛伊木马

saskecn

kis kill all

EQ阻止