发几个

显示全部楼层 · 发表于 2007-5-14 17:36:19

第3个费尔不报

显示全部楼层 · 发表于 2007-5-14 17:37:53

那个脚本nod也没报

显示全部楼层 · 发表于 2007-5-14 17:43:51

detected: Trojan program Trojan.Win32.VB.axd File: C:\Documents and Settings\Owner\×ÀÃæ\XPE.rar/XPE.exe
detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\servtie.rar/servtie.exe//UPack
detected: virus Virus.Win32.Delf.ak File: C:\Documents and Settings\Owner\×ÀÃæ\servtie.rar/Setup.pif//PE_Patch//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-5-14 17:45:08

servtie.exe - Win32/TrojanDownloader.Delf.BHO 木马的变种
Setup.pif - Win32/TrojanDownloader.Agent.BEA 木马的变种
XPE.exe - 未查明的 NewHeur_PE 病毒 [7]

显示全部楼层 · 发表于 2007-5-14 17:49:47

C:\Documents and Settings\moonsilver\桌面\XPE.rar
>>XPE.exe

Worm.VB.amc

C:\Documents and Settings\moonsilver\桌面\servtie
.rar>>Setup.pif

Worm.Kendy.a

rising

显示全部楼层 · 发表于 2007-5-14 22:44:30

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\js2.rar'
C:\Documents and Settings\morgan\My Documents\
  js2.rar
[0] Archive type: RAR
--> vogateADs2.js
Begin scan in 'C:\Documents and Settings\morgan\My Documents\XPE.rar'
C:\Documents and Settings\morgan\My Documents\
  XPE.rar
[0] Archive type: RAR
--> XPE.exe
      [DETECTION] Is the Trojan horse TR/VB.axd.11
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\servtie.rar'
C:\Documents and Settings\morgan\My Documents\
  servtie.rar
[0] Archive type: RAR
--> servtie.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> Setup.pif
      [DETECTION] Is the Trojan horse TR/Dldr.HU.3
      [WARNING] Infected files in archives cannot be repaired!
--> autorun.inf
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-14 22:46:57

显示全部楼层 · 发表于 2007-5-15 02:25:44

Mcafee
servtie.exe New Malware.n
已回报上去

显示全部楼层 · 发表于 2007-5-15 09:22:04

Hello.

It's clear.

Sincerely yours,
Pavel Zelensky
Virus analyst

Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax: +7 (495) 797-8700
E-mail: newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com

> Attachment: js2.zip

显示全部楼层 · 发表于 2007-5-15 17:22:03

一个报已知，一个报可疑另外一个是脚本
木马名称:Trojan.Win32.VB.asa
程序:
I:\TEST\070514\13\XPE\XPE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] 发几个

本帖子中包含更多资源

本帖子中包含更多资源

微点拦

本帖子中包含更多资源