样本再来一个~~

显示全部楼层 · 发表于 2007-5-22 23:39:54

Scan performed at: 2007-5-22 23:39:58
Scanning Log
NOD32 version 2284 (20070522) NT
Command line: C:\Documents and Settings\EQ2\桌面\date.rar
Operating memory - is OK

Date: 22.5.2007 Time: 23:40:02
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\date.rar
C:\Documents and Settings\EQ2\桌面\date.rar ?RAR ?date.exe - probably a variant of Win32/TrojanDownloader.Banload.BIW trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 23:40:02 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-22 23:39:56

detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\date.rar/date.exe//PE_Patch.PECompact//PecBundle//PECompact

显示全部楼层 · 发表于 2007-5-22 23:43:49

红伞“报壳”又“报”准了，怪事

D:\病毒木马样本\date.rar
  [0] Archive type: RAR
  --> date.exe
   [DETECTION] Contains suspicious code HEUR/Malware

显示全部楼层 · 发表于 2007-5-22 23:43:59

卡6 miss

显示全部楼层 · 发表于 2007-5-23 00:14:27

Check system areas...
Check selected directories and files...
Object: date.exe
In archive: C:\Documents and Settings\Administrator\桌面\date.rar
Status: Virus detected
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: date.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Analysis complete: 2007-5-23 0:13
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-23 00:50:50

Hello,

date.exe_ - Trojan-Downloader.Win32.Small.eqy,
Lcass.exe_ - Backdoor.Win32.VB.ags

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: date.rar
> Attachment: Lcass.rar

显示全部楼层 · 发表于 2007-5-23 00:51:44

原帖由 伯夷叔齐 于 2007-5-22 23:43 发表
红伞“报壳”又“报”准了，怪事

D:\病毒木马样本\date.rar
  [0] Archive type: RAR
  --> date.exe
   [DETECTION] Contains suspicious code HEUR/Malware

报准了就报出名称啊

显示全部楼层 · 发表于 2007-5-23 00:59:14

显示全部楼层 · 发表于 2007-5-23 08:53:16

[病毒样本] 样本再来一个~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源