寫磁盤，dll型網馬，hxxp://idetpemiyus.com/index.php?tp=001e4bb7b4d7333d

显示全部楼层 · 发表于 2011-9-23 22:20:44

2011-09-23 22:07:22 C:\Documents and Settings\Roger\Local Settings\Temp\0.07145842354029608.exe Sandboxed As Partially Limited

2011-09-23 22:07:26 C:\Documents and Settings\Roger\Local Settings\Temp\0.07145842354029608.exe Modify Key HKLM\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations

2011-09-23 22:07:34 C:\Documents and Settings\Roger\Local Settings\Temp\0.07145842354029608.exe Direct Disk Access \Device\Harddisk0\DR0

2011-09-23 22:07:51 C:\Documents and Settings\Roger\Local Settings\Temp\6D2.tmp Sandboxed As Partially Limited

2011-09-23 22:07:52 C:\Documents and Settings\Roger\Local Settings\Temp\6D1.tmp Sandboxed As Partially Limited

2011-09-23 22:07:56 C:\Documents and Settings\Roger\Local Settings\Temp\6D1.tmp Modify File C:\WINDOWS\system32\drivers\nsv42.sys

2011-09-23 22:07:56 C:\Documents and Settings\Roger\Local Settings\Temp\6D1.tmp Modify File C:\WINDOWS\system32\providorm2j7i.dll

2011-09-23 22:08:02 C:\Documents and Settings\Roger\Local Settings\Temp\6D1.tmp Install Hook C:\Documents and Settings\Roger\Local Settings\Temp\6D5.tmp

显示全部楼层 · 发表于 2011-9-23 22:21:31

可以測試看看你的網盾是否雞肋

显示全部楼层 · 发表于 2011-9-23 22:46:49

下载后360网盾报未知，360杀毒右键扫描杀2个。

显示全部楼层 · 发表于 2011-9-23 22:49:04

to eset

显示全部楼层 · 发表于 2011-9-23 23:03:27

大蜘蛛clean，已上报！

显示全部楼层 · 发表于 2011-9-23 23:51:37

我的ie6没有那个漏洞

显示全部楼层 · 发表于 2011-9-23 23:57:51

卡巴检测到威胁: HEUR:Trojan.Win32.Generic

显示全部楼层 · 发表于 2011-9-24 01:23:27

显示全部楼层 · 发表于 2011-9-24 10:43:57

金山kill

显示全部楼层 · 发表于 2011-9-24 10:58:02

无压力

[病毒样本] 寫磁盤，dll型網馬，hxxp://idetpemiyus.com/index.php?tp=001e4bb7b4d7333d

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源