Norton报木马的样本

显示全部楼层 · 发表于 2007-7-3 16:08:04

2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/Helper.dll ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll archive CAB
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\1.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\10.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\11.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\2.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\3.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\4.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\5.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\6.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\7.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\8.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\9.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\custom.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\Logo.bmp ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\prodef.ini ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll/Coolbar\profile.ini ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/assist\asbar.dll ok scanned
2007-7-3 JAY16:07:55 File: C:\Documents and Settings\Owner\×ÀÃæ\HB-ImageOptimizer50-fxj.ZIP/HB-ImageOptimizer50-fxj.exe//data0001.exe/cns01.dat ok scanned

显示全部楼层 · 发表于 2007-7-3 16:08:23

好像又有流氓的影子

显示全部楼层 · 发表于 2007-7-3 16:33:02

恭喜你哦楼主有流氓软件没有误报哦

显示全部楼层 · 发表于 2007-7-3 16:50:53

捆了3721还不流氓?

显示全部楼层 · 发表于 2007-7-3 18:20:12

HB-ImageOptimizer50-fxj.zip
  [0] Archive type: ZIP
  --> HB-ImageOptimizer50-fxj.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/CoolBar

显示全部楼层 · 发表于 2007-7-3 19:04:36

.是这个吗?太明显了吧.

显示全部楼层 · 发表于 2007-7-3 19:07:07

还有缓存里的 ..3721 ?不安好心.

显示全部楼层 · 发表于 2007-7-3 19:39:49

看来诺顿还是可以的

显示全部楼层 · 发表于 2007-7-4 08:48:24

Hello,

HB-ImageOptimizer50-fxj.exe

No malicious code was found in this file.

显示全部楼层 · 发表于 2007-7-4 08:55:15

卡巴死活就是不肯得罪3721...

Norton报木马的样本

本帖子中包含更多资源

本帖子中包含更多资源

回复 #19 wangjay1980 的帖子