[MD5: 5C862B 9BF487] 卡7飘了

显示全部楼层 · 发表于 2007-6-25 19:47:20

detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/11.exe

显示全部楼层 · 发表于 2007-6-25 19:49:54

avast飘。。。

dr.web 4.44 :probably MULDROP.Trojan

……

显示全部楼层 · 发表于 2007-6-25 19:51:36

[0] Archive type: RAR
  --> 11.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [WARNING] Infected files in archives cannot be repaired!
  --> 2.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-25 19:56:50

咖啡报木马

显示全部楼层 · 发表于 2007-6-25 19:58:49

2007-6-25 20:02:11 Process F:2.exe (PID: 1912): suspicious action.

Attempt to create list of modules executed during system startup (key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\my.exe, value Debugger, data 2.exe).

显示全部楼层 · 发表于 2007-6-25 20:06:00

显示全部楼层 · 发表于 2007-6-25 20:06:25

这个劫持奇怪啊

显示全部楼层 · 发表于 2007-6-25 20:09:04

7.0.0.123 启发最大，飘过。。。

显示全部楼层 · 发表于 2007-6-25 20:10:46

C:/ABC/\样本.rar:\11.exe - Suspect code-parts found (Level: 80)
C:/ABC/\样本.rar:\2.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
C:/ABC/\样本.rar

6 Files scanned
(2 Archives with 4 files)
2 Signatures found
1 Suspect code-part found
Used time: 0:00.172

[病毒样本] [MD5: 5C862B 9BF487] 卡7飘了

本帖子中包含更多资源

本帖子中包含更多资源