昨天毒网的vip.exe更新了[MD5: E9859F 087F8B]

显示全部楼层 · 发表于 2007-7-8 10:53:11

这会卡巴和bd都哑火了

同样感染能感染所有exe文件。

作者为什么不搞U盘感染？现在这样的传染性还不够强啊

显示全部楼层 · 发表于 2007-7-8 10:54:35

avast不让我下载

显示全部楼层 · 发表于 2007-7-8 10:56:43

Scan performed at: 2007-7-8 10:54:49
Scanning Log
NOD32 version 2383 (20070706) NT
Command line: C:\Documents and Settings\wangcheng\桌面\virus.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 8.7.2007 Time: 10:54:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\桌面\virus.rar
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?microsofts.exe - a variant of Win32/Butileg virus
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?MSOSVERT.EXE - a variant of Win32/Butileg virus
Number of scanned files: 3
Number of threats found: 2
Number of active threats: 1
Time of completion: 10:54:51 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-7-8 10:57:29

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\
  virus.rar
[0] Archive type: RAR
--> microsofts.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> MSOSVERT.EXE
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '470252f5.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-8 10:58:03

费尔两个启发。

显示全部楼层 · 发表于 2007-7-8 11:01:40

Micropoint

显示全部楼层 · 发表于 2007-7-8 11:06:34

上报

显示全部楼层 · 发表于 2007-7-8 11:16:20

显示全部楼层 · 发表于 2007-7-8 11:28:11

[Scan path] C:\Documents and Settings\Administrator\桌面\virus.rar
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\microsofts.exe probably infected with DLOADER.Trojan
>>C:\Documents and Settings\Administrator\桌面\virus.rar\MSOSVERT.EXE probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\桌面\virus.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 4
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 2
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 19 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-7-8 12:14:07

而且昨天其中一个js失效了
貌似也发现被发现了……

其中一个名字爆酷：边缘者……

[病毒样本] 昨天毒网的vip.exe更新了[MD5: E9859F 087F8B]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源