AV终结者...

显示全部楼层 · 发表于 2007-7-20 22:28:34

Inetinf.exe\bind_50425.exe;D:\Documents and Settings\dell\桌面\Inetinf.rar\Inetinf.exe;Trojan.DownLoader.26006;;
Inetinf.exe\boolan94.exe;D:\Documents and Settings\dell\桌面\Inetinf.rar\Inetinf.exe;Trojan.Resun;;
ad_2207.exe\data001;D:\Documents and Settings\dell\桌面\Inetinf.rar\Inetinf.exe\ad_2207.exe;Adware.Borlander;;

显示全部楼层 · 发表于 2007-7-21 20:11:27

已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ai 文件: C:\Documents and Settings\Owner\桌面\Inetinf.rar/Inetinf.exe//data.rar/ad_2207.exe//stream//data0001

ka7怎么会认为是广告程序呢>

显示全部楼层 · 发表于 2007-7-21 20:15:30

C:\Documents and Settings\Administrator\桌面\Inet
inf.rar>>Inetinf.exe>>bind_50425.exe
Trojan.DL.Win32.Agent.wkq
C:\Documents and Settings\Administrator\桌面\Inet
inf.rar>>Inetinf.exe>>boolan94.exe
Trojan.DL.Win32.Agent.bi
C:\Documents and Settings\Administrator\桌面\Inet
inf.rar>>Inetinf.exe>>ad_2207.exe>>$TEMP\insshell
Dropper.Win32.Agent.y
卡巴漏杀了两个。。。

显示全部楼层 · 发表于 2007-7-21 20:32:24

微点
C:\PROGRAM FILES\BOOLAN94.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:1926
远端地址:60.217.234.139(山东)
远端端口:80
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX01.312\INETINF.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\BIND_50425.EXE
2) C:\PROGRAM FILES\BOOLAN94.EXE
3) C:\PROGRAM FILES\AD_2207.EXE
是否删除木马程序及其衍生物?

[病毒样本] AV终结者...