一个，过卡巴扫描

显示全部楼层 · 发表于 2007-5-28 17:44:25

以前发过的，现在更新了。

显示全部楼层 · 发表于 2007-5-28 17:45:09

Ad风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!
===============================================
___________病毒查杀结果__________________

===============================================
2007年5月28日17时45分34秒开始查杀C:\Documents and Settings\root\桌面\新建文件夹\bind_50380
=========================================
_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------
2007年5月28日17时45分34秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：0

显示全部楼层 · 发表于 2007-5-28 17:47:31

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\bind_50380.zip'
C:\Documents and Settings\Administrator\桌面\bind_50380.zip
  [0] Archive type: ZIP
  --> bind_50380.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-28 17:47:48

KV不报

显示全部楼层 · 发表于 2007-5-28 17:48:33

VBA32挂了

Scan performed at: 2007-5-28 17:47:59
Scanning Log
NOD32 version 2293 (20070527) NT
Command line: C:\ABC\bind_50380.zip
Operating memory - is OK

Date: 28.5.2007 Time: 17:48:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\ABC\bind_50380.zip
C:\ABC\bind_50380.zip ?ZIP ?bind_50380.exe - probably a variant of Win32/TrojanDownloader.QQHelper trojan
Number of scanned files: 3
Number of threats found: 1
Number of active threats: 1
Time of completion: 17:48:07 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-5-28 17:49:16

绿伞

C:\Documents and Settings\moonsilver\桌面\bind_50
380.zip>>bind_50380.exe

Trojan.DL.Linis.aa

红伞

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\bind_50380.zip'
C:\Documents and Settings\Administrator\桌面\bind_50380.zip
  [0] Archive type: ZIP
  --> bind_50380.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

[ 本帖最后由 moonsilver 于 2007-5-28 17:50 编辑 ]

显示全部楼层 · 发表于 2007-5-28 17:50:30

杀了

显示全部楼层 · 发表于 2007-5-28 17:50:34

好东西

显示全部楼层 · 发表于 2007-5-28 18:12:35

avk07杀。。
绿伞是什么?

显示全部楼层 · 发表于 2007-5-28 19:15:04

Hello,

bind_50380.exe_ - Trojan-Downloader.Win32.QQHelper.vx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Erakhtin Kirill
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

> Attachment: bind_50380.zip

[病毒样本] 一个，过卡巴扫描

本帖子中包含更多资源

本帖子中包含更多资源