迅雷10K木马

显示全部楼层 · 发表于 2008-7-10 00:43:50

EWIDO找的,不知道什么时候搞出来的?连同其它找到的一同送上

[ 本帖最后由 tanjianwen 于 2008-7-10 00:54 编辑 ]

显示全部楼层 · 发表于 2008-7-10 08:13:03

红伞杀！！！

显示全部楼层 · 发表于 2008-7-10 08:48:13

kv 分别为 1
0
0

显示全部楼层 · 发表于 2008-7-10 08:50:47

1
The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
307033&k=49969d64664433cff2aebfa8d0b7a56
9&t=1215650973

The following error was encountered:

The requested object is INFECTED with the following viruses: Trojan.Win32.Zapchast.kl

Please contact your service provider if you consider it incorrect.

显示全部楼层 · 发表于 2008-7-10 08:53:27

The requested object is INFECTED with the following viruses: Trojan.Win32.Zapchast.kl

显示全部楼层 · 发表于 2008-7-10 08:56:31

NOD才杀了一个……

显示全部楼层 · 发表于 2008-7-10 09:26:28

显示全部楼层 · 发表于 2008-7-10 09:27:17

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.Small.jn
病毒： Trojan.DL.Agent.ndj

用户来源：互联网

软件版本：20.52.22

显示全部楼层 · 发表于 2008-7-10 09:32:29

对象: gdimnt.dll
在压缩档案里: F:\gdimnt.rar
Status: 已发现病毒
病毒: Trojan.Win32.Zapchast.kl (KAV 引擎)
对象: gdimnt gdimnt.dll
在压缩档案里: F:\gdimnt.rar
Status: 已发现病毒
病毒: Trojan.Win32.Zapchast.kl (KAV 引擎)
对象: gdimnt\msgmanage.dll
在压缩档案里: F:\gdimnt.rar
Status: 已发现病毒
病毒: Trojan.Downloader.AHQ (BD 引擎)

显示全部楼层 · 发表于 2008-7-10 10:07:17

Begin scan in 'C:\Documents and Settings\Administrator\桌面\gdimnt'
C:\Documents and Settings\Administrator\桌面\gdimnt\DOpus 9 patch (v3.2).EXE
   [DETECTION] Contains suspicious code HEUR/Crypted
   [NOTE]    A backup was created as '48e56f0c.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\gdimnt\gdimnt.dll
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    A backup was created as '48de6f21.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\gdimnt\gdimnt\gdimnt.dll
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    A backup was created as '4956fbc2.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\rd'
Begin scan in 'C:\Documents and Settings\Administrator\桌面\DOpus 9 patch (v3.2)'
C:\Documents and Settings\Administrator\桌面\DOpus 9 patch (v3.2)\DOpus 9 patch (v3.2).EXE
   [DETECTION] Contains suspicious code HEUR/Crypted
   [NOTE]    A backup was created as '49630225.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年7月10日  10:06
Used time: 00:02 min

The scan has been done completely.

   4 Scanning directories
   7 Files were scanned
   2 viruses and/or unwanted programs were found
   2 Files were classified as suspicious:
   4 files were deleted
   0 files were repaired
   4 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   0 Archives were scanned
   0 Warnings
   4 Notes

[病毒样本] 迅雷10K木马

本帖子中包含更多资源

Kaspersky Internet Security 2009

本帖子中包含更多资源

浏览过的版块