可疑几个 autorun[MD5: 3B8F31 74DC19 C1A280]

显示全部楼层 · 发表于 2007-7-3 12:56:18

可疑几个 autorun

[MD5: 3B8F31 74DC19 C1A280]

显示全部楼层 · 发表于 2007-7-3 12:58:55

已检测到: 木马程序 Trojan-Downloader.Win32.Ieser.c URL: http://bbs.kafan.cn/attachment.p ... PecBundle/PECompact

显示全部楼层 · 发表于 2007-7-3 13:00:33

2007/7/3 12:59:15 eAmon file D:\病毒上报\UUSETUP.EXE Win32/TrojanDownloader.Ieser.NAE trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/7/3 12:59:13 eAmon file D:\病毒上报\AUTO.EXE a variant of Win32/Agent.NEO trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

显示全部楼层 · 发表于 2007-7-3 13:01:54

1个

显示全部楼层 · 发表于 2007-7-3 13:02:35

C:\Documents and Settings\Administrator\桌面\样本
.rar>>auto.exe Worm.Win32.Agent.wu
C:\Documents and Settings\Administrator\桌面\样本
.rar>>uusetup.exe Trojan.Win32.Agent.hrt
獅子咬死兩個

显示全部楼层 · 发表于 2007-7-3 13:02:51

另一个红伞报
Start of the scan: 2007年7月3日  13:02

Starting the file scan:

Begin scan in 'D:\病毒测试\未解压\��.rar'
D:\病毒测试\未解压\��.rar
  [0] Archive type: RAR
  --> uusetup.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.obt
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-3 13:07:14

Scan performed at: 2007-7-3 13:06:45
Scanning Log
NOD32 version 2372 (20070703) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 3.7.2007 Time: 13:06:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?auto.exe - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?uusetup.exe - Win32/TrojanDownloader.Ieser.NAE trojan - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 13:06:56 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-7-3 13:12:47

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
[0] Archive type: RAR
--> auto.exe
--> autorun.inf
--> uusetup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.obt
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-3 13:18:09

EQ兄用的是NOD吧，呵呵，如果是的话，那还真感觉不错

显示全部楼层 · 发表于 2007-7-3 14:29:34

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/auto.exe
detected: Trojan program Trojan-Downloader.Win32.Ieser.c File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/uusetup.exe//PE_Patch.PECompact//PecBundle//PECompact

[病毒样本] 可疑几个 autorun[MD5: 3B8F31 74DC19 C1A280]

本帖子中包含更多资源

卡巴搞定

本帖子中包含更多资源

实际上只有两个。。

浏览过的版块