[MD5: 4B01D5]

显示全部楼层 · 发表于 2007-7-23 08:51:31

[MD5: 4B01D5]

显示全部楼层 · 发表于 2007-7-23 08:58:39

C:\virus\样本.rar »RAR »農民找小姐.com »RAR »8.exe - a variant of Win32/PSW.Maran trojan

显示全部楼层 · 发表于 2007-7-23 08:59:12

C:\virus\
  样本.rar
  样本.rar:Zone.Identifier
[0] Archive type: RAR
--> ÞrÃñÕÒÐ¡½ã.com
      [1] Archive type: RAR SFX (self extracting)
      --> ¶W±j¦¨¤H¯º¸Ü.exe
      [2] Archive type: RAR SFX (self extracting)
      --> ¶W±j¦¨¤H¯º¸Ü.txt
      --> 8.exe
         [DETECTION] Is the Trojan horse TR/PSW.Steal.115200
         [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-23 08:59:34

IKARUS - T3SCAN V1.25 (WIN32)
      T3 V1.01.08
      Copyright (c) 2003 - 2007 by IKARUS Software.
      Written by Richard Schmoegner.
      All rights reserved.

Signature-database from 18.7.2007 17:07:57 (Build: 69228)

C:\virus\样本.rar:\農民找小姐.com\8.exe - Signature 'Backdoor.Win32.Elfrit.12' f
ound

      4 Files scanned
      (1 Archiv with 3 files)
      1 Signature found
      0 Suspect code-parts found
      Used time: 0:00.344

显示全部楼层 · 发表于 2007-7-23 09:01:24

金山,费尔挂!
微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RARSFX0\8.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\OD3MDI.DLL
是否删除木马程序及其衍生物?

然后就是超强成人笑话,一堆乱码

显示全部楼层 · 发表于 2007-7-23 09:14:09

偷密码的一只

显示全部楼层 · 发表于 2007-7-23 09:17:28

扫描开始时间: 2007-7-23 9:17:00
扫描日志
NOD32 版本 2411 (20070721) NT
命令行: C:\Documents and Settings\Martin\桌面\样本.rar
系统内存<病毒 - >

日期: 2007年7月23日时间: 09:17:06
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\Martin\桌面\样本.rar
C:\Documents and Settings\Martin\桌面\样本.rar ?RAR ?農民找小姐.com ?RAR ?8.exe<病毒 - Win32/PSW.Maran 木马变种> - 是删除目标的一部分
已扫描文件数量: 3
已发现病毒数量: 1
已清除病毒的文件数量: 1
完成时间: 09:17:09 总共扫描时间: 3 秒 (00:00:03)

显示全部楼层 · 发表于 2007-7-23 09:32:58

detected: virus Heur.Trojan.Generic File: C:\Documents and Settings\Owner\×ÀÃæ\c.zip/ÞrÃñÕÒÐ¡½ã.com//data.rar/8.exe//PE_Patch.PECompact//PecBundle//PECompact

显示全部楼层 · 发表于 2007-7-23 09:38:14

A-Squared  Found nothing
AntiVir  Found TR/PSW.Steal.115200
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found PSW.Generic4.ZUC
BitDefender  Found Generic.PWStealer.F2A1608F
ClamAV  Found nothing
CPsecure  Found Troj.PSW.W32.Maran.is
Dr.Web  Found Trojan.PWS.Maran
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found PWS.Y!tr
Kaspersky Anti-Virus  Found nothing
NOD32  Found a variant of Win32/PSW.Maran
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found Mal/Maran-A
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2007-7-23 09:58:08

咖啡拦截

[病毒样本] [MD5: 4B01D5]

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块