[MD5: 07cb03]哈尼綜合生活網樣本(黑衣-魂样本)

显示全部楼层 · 发表于 2007-7-4 20:33:16

感谢黑衣-魂

显示全部楼层 · 发表于 2007-7-4 20:34:19

Scan performed at: 2007-7-4 20:34:06
Scanning Log
NOD32 version 2378 (20070704) NT
Command line: C:\Documents and Settings\EQ2\桌面\?ェ侯?ネ?.rar
Operating memory - is OK

Date: 4.7.2007 Time: 20:34:12
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\?ェ侯?ネ?.rar
C:\Documents and Settings\EQ2\桌面\?ェ侯?ネ?.rar ?RAR ?6143.htm - VBS/TrojanDownloader.Psyme.FN trojan - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 20:34:12 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-4 20:35:20

红伞

Found a virus or unwanted program 'HEUR/Exploit.HTML' [heuristic]
in file 'F:\?ェ侯?ネ?.rar'.
Action taken:

显示全部楼层 · 发表于 2007-7-4 20:36:35

卡巴飘过..........

显示全部楼层 · 发表于 2007-7-4 20:38:41

DR WEB

上报

显示全部楼层 · 发表于 2007-7-4 20:39:12

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.VBS.Agent.cgk

用户来源：互联网

软件版本：19.30.22

显示全部楼层 · 发表于 2007-7-4 20:42:42

以前似乎有看过这一类调用ftp.exe的批处理下载者

ftp://222.191.251.99
用户名：czh808
密码：haha123520

懒得下载了，大家自己去看看

显示全部楼层 · 发表于 2007-7-4 20:45:49

C:\ABC\?ェ侯?ネ?.rar:\20070418a.exe\tt.bat
C:\ABC\?ェ侯?ネ?.rar:\20070418a.exe\soft.vbs
C:\ABC\?ェ侯?ネ?.rar:\20070418a.exe
C:\ABC\?ェ侯?ネ?.rar:\6143.htm - Signature 'Exploit.JS.ADODB.Stream' found
C:\ABC\?ェ侯?ネ?.rar
7 Files scanned
(2 Archives with 5 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:02.609

显示全部楼层 · 发表于 2007-7-4 21:47:44

小红伞防病毒 7.4.0.37 6.39.0.94 2007-07-04 HEUR/Exploit.HTML 1.968
VBA32 防病毒 3.12.0.2 20070703.1849 2007-07-03 Trojan-Downloader.VBS.Psyme.ch#1 1.03

显示全部楼层 · 发表于 2007-7-4 21:51:09

AVAST飘过

[MD5: 07cb03]哈尼綜合生活網樣本(黑衣-魂样本)

本帖子中包含更多资源