下载者 1de743

显示全部楼层 · 发表于 2007-9-1 18:07:41

[DETECTION] Is the Trojan horse TR/Dldr.Tiny.M.1

显示全部楼层 · 发表于 2007-9-1 18:08:07

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 1396
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\43C.exe

C:\Documents and Settings\uhthn\Desktop\43C.exe - Suspicious of Trojan-Downloader.Small.2

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-1 18:09:05

Starting the file scan:

Begin scan in 'F:\病毒样本\43C.rar'
F:\病毒样本\43C.rar
  [0] Archive type: RAR
  --> 43C.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Tiny.M.1
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-1 18:39:35

Scan performed at: 2007-9-1 18:39:14
Scanning Log
NOD32 version 2495 (20070901) NT
Command line: C:\Documents and Settings\Don johnson\桌面\43C.rar
Operating memory - is OK

Date: 1.9.2007 Time: 18:39:19
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\43C.rar
C:\Documents and Settings\Don johnson\桌面\43C.rar ?RAR ?43C.exe - Win32/TrojanDownloader.Tiny.M trojan - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 18:39:19 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-1 18:49:13

我一运行就退出了

显示全部楼层 · 发表于 2007-9-1 18:58:15

已检测: 木马程序 Trojan-Downloader.Win32.Tiny.m URL: http://bbs.kafan.cn/attachment.php?aid=122166//43C.exe

显示全部楼层 · 发表于 2007-9-1 19:14:22

学习下

显示全部楼层 · 发表于 2007-9-1 19:23:35

半成品
代码中缺地址

显示全部楼层 · 发表于 2007-9-1 19:46:46

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\43C.EXE
是否删除木马程序及其衍生物?

[病毒样本] 下载者 1de743

本帖子中包含更多资源

浏览过的版块