卡饭论坛 » 病毒样本区 » 一只病毒（转自雨林）

卡巴007 发表于 2008-8-19 12:45

一只病毒（转自雨林）

一只病毒。卡巴kill掉。

请求的对象被感染，发现下列病毒 Trojan.BAT.KillFiles.iw

lintianyuan 发表于 2008-8-19 12:53

...一只万年小强~
KV09不报毒，金山不报毒

luxiao200888 发表于 2008-8-19 12:54

乖乖 红伞不报？

啊弥陀佛 发表于 2008-8-19 12:54

微点拦截

luxiao200888 发表于 2008-8-19 12:55

上报～

龙城小武 发表于 2008-8-19 13:09

请求的对象被感染，发现下列病毒 Trojan.BAT.KillFiles.iw
kis2009

qigang 发表于 2008-8-19 13:14

2/0

RS20.58.10未杀！[:14:]

htyhzd 发表于 2008-8-19 14:17

反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.8.19.0 2008.08.19 -
AntiVir 7.8.1.19 2008.08.18 -
Authentium 5.1.0.4 2008.08.19 W32/Dropper.IZJ
Avast 4.8.1195.0 2008.08.18 -
AVG 8.0.0.161 2008.08.18 -
BitDefender 7.2 2008.08.19 Trojan.Generic.127328
CAT-QuickHeal 9.50 2008.08.18 Trojan.Agent.71
ClamAV 0.93.1 2008.08.19 Trojan.Dropper-4991
DrWeb 4.44.0.09170 2008.08.18 Trojan.StartPage.20998
eSafe 7.0.17.0 2008.08.18 -
eTrust-Vet 31.6.6035 2008.08.15 -
Ewido 4.0 2008.08.18 -
F-Prot 4.4.4.56 2008.08.18 W32/Dropper.IZJ
F-Secure 7.60.13501.0 2008.08.19 -
Fortinet 3.14.0.0 2008.08.19 PossibleThreat
GData 2.0.7306.1023 2008.08.19 Trojan.BAT.KillFiles.iw
Ikarus T3.1.1.34.0 2008.08.19 Trojan.Generic
K7AntiVirus 7.10.420 2008.08.18 Trojan-Dropper.Win32.Delf.ara
Kaspersky 7.0.0.125 2008.08.19 Trojan.BAT.KillFiles.iw
McAfee 5363 2008.08.18 -
Microsoft 1.3807 2008.08.19 -
NOD32v2 3366 2008.08.19 -
Norman 5.80.02 2008.08.18 -
Panda 9.0.0.4 2008.08.18 -
PCTools 4.4.2.0 2008.08.18 -
Prevx1 V2 2008.08.19 Malware Dropper
Rising 20.58.02.00 2008.08.18 -
Sophos 4.32.0 2008.08.19 -
Sunbelt 3.1.1546.1 2008.08.15 -
Symantec 10 2008.08.19 -
TheHacker 6.3.0.5.054 2008.08.19 -
TrendMicro 8.700.0.1004 2008.08.19 -
VBA32 3.12.8.3 2008.08.19 Trojan-Dropper.Win32.Delf.ara
ViRobot 2008.8.18.1339 2008.08.18 -
VirusBuster 4.5.11.0 2008.08.18 -
Webwasher-Gateway 6.6.2 2008.08.19 -

Nblock 发表于 2008-8-19 14:24

微点主动免疫系统报警 是否阻止文件被删除?

[attach]338713[/attach]   [attach]338714[/attach]

cnufo 发表于 2008-8-19 14:27

VDF:v7.00.06.31
[:xi46:]
Start of the scan: 2008年8月19日  14:24

Starting the file scan:

Begin scan in 'F:\gge.rar'
F:\gge.rar
    [0] Archive type: RAR
    --> 1\1.exe
      [DETECTION] Contains a recognition pattern of the (harmful) BDS/Killfiles.IW back-door program
    [NOTE]      The file was moved to '490f67a1.qua'!


End of the scan: 2008年8月19日  14:24
Used time: 00:06 Minute(s)

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

zwl2828 发表于 2008-8-19 14:37

Norton Internet Security

Trojan.KillAV
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
c:\users\wesley\downloads\gge.rar - Deleted

dl123100 发表于 2008-8-19 18:36

感染型的 刚看到一个过卡巴交互模式的 又来一个

BING126 发表于 2008-8-19 20:33

McAfee  miss

尤金卡巴斯基 发表于 2008-8-19 22:36

2008/8/19 22:30:26        已清除        木马程序 Trojan.BAT.KillFiles.iw        G:\Temp\Virus\gge.rar/1\1.exe

查看完整版本: 一只病毒（转自雨林）