5/31 10:00 两个，过卡巴扫描。（下午卡巴均入库可杀）

allenhippo

上报吧

这个难道是广告？


这个基本全灭？


[ 本帖最后由 allenhippo 于 2007-5-31 14:47 编辑 ]

allenhippo

第一个已经上报卡巴了。第二个再确认下。

第一个
扫描开始时间: 2007-5-31 10:19:34
扫描日志
NOD32 版本 2299 (20070530) NT
命令行: F:\6080_158158.zip

日期: 2007年5月31日  时间: 10:19:36
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\6080_158158.zip
F:\6080_158158.zip ?ZIP ?6080_158158.exe ?RAR ?dodolook246.exe ?NSIS ?1136.exe ?NSIS ?acpidisk.sys<病毒 - Win32/Adware.Cinmus 应用程序 变种>
已扫描文件数量: 5
已发现病毒数量: 1
完成时间: 10:19:36 总共扫描时间: 0 秒 (00:00:00)

第二个nod飘过

7506318

第一个avast报！

wkwx

1:
2:没任何反应

foxhound

KIS7.0.0.119 扫描还是被过~~ 2个都没反应

wangjay1980

好东东

Complete scanning result of "6080_158158.zip", received in VirusTotal at 05.31.2007, 04:36:50 (CET).

Antivirus	Version	Update	Result
AhnLab-V3	2007.5.30.0	05.30.2007 [td]no virus found
AntiVir	7.4.0.29	05.30.2007	HEUR/Malware
Authentium	4.93.8	05.23.2007 [td]no virus found
Avast	4.7.997.0	05.30.2007	Win32:Adware-gen.
AVG	7.5.0.467	05.30.2007 [td]no virus found
BitDefender	7.2	05.31.2007	DeepScan:Generic.Dld.ADL.A8696069
CAT-QuickHeal	9.00	05.30.2007 [td]no virus found
ClamAV	devel-20070416	05.30.2007 [td]no virus found
DrWeb	4.33	05.30.2007 [td]no virus found
eSafe	7.0.15.0	05.30.2007 [td]no virus found
eTrust-Vet	30.7.3678	05.30.2007 [td]no virus found
Ewido	4.0	05.29.2007 [td]no virus found
FileAdvisor	1	05.31.2007 [td]no virus found
Fortinet	2.85.0.0	05.31.2007	suspicious
F-Prot	4.3.2.48	05.30.2007 [td]no virus found
F-Secure	6.70.13030.0	05.30.2007 [td]no virus found
Ikarus	T3.1.1.8	05.30.2007	not-a-virus:AdWare.Win32.Cinmus.f
Kaspersky	4.0.2.24	05.31.2007 [td]no virus found
McAfee	5042	05.30.2007 [td]no virus found
Microsoft	1.2503	05.31.2007 [td]no virus found
NOD32v2	2299	05.30.2007	a variant of Win32/Adware.Cinmus
Norman	5.80.02	05.30.2007 [td]no virus found
Panda	9.0.0.4	05.30.2007	Suspicious file
Prevx1	V2	05.31.2007 [td]no virus found
Sophos	4.18.0	05.28.2007	Mal/TinyDL-D
Sunbelt	2.2.907.0	05.30.2007 [td]no virus found
Symantec	10	05.31.2007 [td]no virus found
TheHacker	6.1.6.126	05.30.2007 [td]no virus found
VBA32	3.12.0	05.30.2007	BackDoor.Huai
VirusBuster	4.3.23:9	05.30.2007 [td]no virus found
Webwasher-Gateway	6.0.1	05.31.2007	Heuristic.Malware

Complete scanning result of "bind_50287.zip", received in VirusTotal at 05.31.2007, 04:40:51 (CET).

Antivirus	Version	Update	Result
AhnLab-V3	2007.5.30.0	05.30.2007 [td]no virus found
AntiVir	7.4.0.29	05.30.2007	HEUR/Malware
Authentium	4.93.8	05.23.2007 [td]no virus found
Avast	4.7.997.0	05.30.2007 [td]no virus found
AVG	7.5.0.467	05.30.2007 [td]no virus found
BitDefender	7.2	05.31.2007 [td]no virus found
CAT-QuickHeal	9.00	05.30.2007 [td]no virus found
ClamAV	devel-20070416	05.30.2007 [td]no virus found
DrWeb	4.33	05.30.2007 [td]no virus found
eSafe	7.0.15.0	05.30.2007 [td]no virus found
eTrust-Vet	30.7.3678	05.30.2007	Win32/DlQQHelp!generic
Ewido	4.0	05.29.2007 [td]no virus found
FileAdvisor	1	05.31.2007 [td]no virus found
Fortinet	2.85.0.0	05.31.2007 [td]no virus found
F-Prot	4.3.2.48	05.30.2007 [td]no virus found
F-Secure	6.70.13030.0	05.30.2007 [td]no virus found
Ikarus	T3.1.1.8	05.30.2007 [td]no virus found
Kaspersky	4.0.2.24	05.31.2007 [td]no virus found
McAfee	5042	05.30.2007 [td]no virus found
Microsoft	1.2503	05.31.2007 [td]no virus found
NOD32v2	2299	05.30.2007 [td]no virus found
Norman	5.80.02	05.30.2007 [td]no virus found
Panda	9.0.0.4	05.30.2007	Suspicious file
Prevx1	V2	05.31.2007 [td]no virus found
Sophos	4.18.0	05.28.2007	Mal/TinyDL-D
Sunbelt	2.2.907.0	05.30.2007 [td]no virus found
Symantec	10	05.31.2007 [td]no virus found
TheHacker	6.1.6.126	05.30.2007 [td]no virus found
VBA32	3.12.0	05.30.2007 [td]no virus found
VirusBuster	4.3.23:9	05.30.2007 [td]no virus found
Webwasher-Gateway	6.0.1	05.31.2007	Heuristic.Malware

第二个狂汗。。。

wangjay1980

Hello,

6080_158158.exe_ - Trojan-Downloader.Win32.QQHelper.wn

bind_50287.exe_ - Trojan-Downloader.Win32.QQHelper.vx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: 6080_158158.zip
> Attachment: bind_50287.zip

蓝色牛仔裤

漏一个，上报。。

[Scan path] C:\Documents and Settings\Administrator\桌面\bind_50287.zip
>C:\Documents and Settings\Administrator\桌面\bind_50287.zip\bind_50287.exe infected with Trojan.DownLoader.origin
C:\Documents and Settings\Administrator\桌面\bind_50287.zip - archive contains infected objects