11个 (来自美国和阿拉伯大型毒窟)

sam.to

578ab478cc6cd42f6d5d8876a07e134d  fati.exe_
54864a4840c7d515c18e3458885539b9  wh_21830646.exe_
6e07d9f3be1ea32f283e30e916d3ffc1  wh_21858242.exe_
6e7284b58309face83d283ab61998ab6  wh_21879536.exe_
b544bccdb19fd507c13083e8ba12c19b  wh_21893566.exe_
7b87b4abe4e643908d0a9e7c91257de4  wh_21895554.exe_
39f09619d9a98475330268e5fa1e09df  wh_21904581.exe_
dc69bc95245941471a3baa87018b9685  wh_21905788.exe_
9c1e84ba545b8159e7cc1ef8245a059a  wh_21931707.exe_
f9c4c3949d42ea3dcc287f14b1b589b8  wh_21970488.exe_
605bcab77aa30b666ab2b9a94d27e0b5  wh_21986457.exe_


卡巴报大部分(heur)

to kl,ll


Hello,

fati.exe_ - Trojan.Win32.Buzus.cuum,
wh_21830646.exe_ - Trojan-Dropper.Win32.Stabs.gnj,
wh_21879536.exe_ - Backdoor.Win32.Poison.bcmb,
wh_21893566.exe_ - Trojan.Win32.Refroso.aakz,
wh_21895554.exe_ - Backdoor.Win32.Bifrose.bzqb,
wh_21904581.exe_ - Trojan.Win32.Refroso.aala,
wh_21905788.exe_ - Trojan.Win32.Refroso.aald,
wh_21931707.exe_, wh_21931707.exe_.DR.KIMTools.exe.CoffinAntiVirusKiller.bat_, wh_21931707.exe_.DR.KIMTools.exe_ - Trojan.BAT.KillAV.nm,
wh_21931707.exe_.pall.exe_ - Trojan.Win32.Buzus.cuur,
wh_21970488.exe_ - Backdoor.Win32.Poison.bcmc,
wh_21986457.exe_ - Trojan.Win32.Refroso.aale

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

wh_21858242.exe_

No malicious code was found in this file.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards,
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

kanfaner

1toAVK  ；54864a4840c7d515c18e3458885539b9  wh_21830646.exe_

而IK查到了54864a4840c7d515c18e3458885539b9  wh_21830646.exe_，互补没漏。

zdlzp

10个

saga3721

红伞杀10个，剩下一个说安全
File ID  Filename Size (Byte) Result
25528011  wh_21858242.rar 70.39 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
4874816  wh_21858242.exe_  209.53 KB  KNOWN CLEAN

kalynn84

009-12-21 21:47:03        Administrator        3784        Sign of "Win32:Buzus-AAQ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\fati.exe_" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Crypt-EQS [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21830646.exe_" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Agent-ACII [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21879536.exe_\[Obsidium]" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Refroso-F [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21893566.exe_" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Midgare-VB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21895554.exe_" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Refroso-F [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21904581.exe_" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Inject-UZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21905788.exe_" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "BV:KillAV-AU [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21931707.exe_\DR.KIM Tools.exe\Coffin AntiVirus Killer.bat" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Trojan-gen" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21931707.exe_\pall.exe" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Poison-PQ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21970488.exe_" file.  
2009-12-21 21:47:05        Administrator        3784        Sign of "Win32:Refroso-B [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\8675r4es.7z\8675r4es\wh_21986457.exe_" file.

black104

avast 11个

jason_jiang

drweb剩1x（wh_21858242.exe_，KNOWN CLEAN）

fati.exe_ 已被病毒感染 ：  BackDoor.Bifrost.8
wh_21830646.exe_ 已被病毒感染 ：  Trojan.Inject.3866
wh_21858242.exe_ - 确定
>>wh_21879536.exe_ 已被病毒感染 ：  Trojan.KeyLogger.2331
wh_21893566.exe_ 已被病毒感染 ：  BackDoor.Bifrost.8
wh_21895554.exe_ 已被病毒感染 ：  BackDoor.Bifrost.8
wh_21904581.exe_ 已被病毒感染 ：  BackDoor.Bifrost.8
wh_21905788.exe_ 已被病毒感染 ：  BackDoor.Bifrost.8
>>wh_21931707.exe_/DR.KIM Tools.exe/Coffin AntiVirus Killer.bat - 确定
>wh_21931707.exe_/DR.KIM Tools.exe - 确定
>wh_21931707.exe_/pall.exe 已被病毒感染 ：  Trojan.PWS.Multi.38
wh_21931707.exe_ - 发现压缩文件中有被感染的对象
wh_21970488.exe_ 已被病毒感染 ：  Trojan.MulDrop.33372
wh_21986457.exe_ 已被病毒感染 ：  BackDoor.Poison.767

kingmuro

2009-12-21 22:04:48        GXF        2356        Sign of "Win32:Buzus-AAQ [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\fati.exe_" file.  
2009-12-21 22:04:50        GXF        2356        Sign of "Win32:Crypt-EQS [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21830646.exe_" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Agent-ACII [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21879536.exe_\[Obsidium]" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Refroso-F [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21893566.exe_" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Midgare-VB [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21895554.exe_" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Refroso-F [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21904581.exe_" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Inject-UZ [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21905788.exe_" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "BV:KillAV-AU [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21931707.exe_\DR.KIM Tools.exe\Coffin AntiVirus Killer.bat" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21931707.exe_\pall.exe" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Poison-PQ [Trj]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21970488.exe_" file.  
2009-12-21 22:04:51        GXF        2356        Sign of "Win32:Refroso-B [Drp]" has been found in "D:\My Documents\桌面\test\8675r4es\8675r4es\wh_21986457.exe_" file.  
avast       11个

jianhua_265

Ayer