b4f320 eb75c2 1e5688

显示全部楼层 · 发表于 2007-9-5 10:39:37

3
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/7.exe//PE_Patch.UPX
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/4.exe
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/6.exe//PE_Patch.UPX

[ 本帖最后由 wangjay1980 于 2007-9-5 10:46 编辑 ]

显示全部楼层 · 发表于 2007-9-5 10:42:36

NOD只抓到两只

C:\Documents and Settings\Administrator\桌面\3.zip » ZIP » 4.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Administrator\桌面\3.zip » ZIP » 7.exe - a variant of Win32/PSW.OnLineGames.YA trojan

显示全部楼层 · 发表于 2007-9-5 10:42:48

panda

显示全部楼层 · 发表于 2007-9-5 10:43:07

显示全部楼层 · 发表于 2007-9-5 10:43:24

Starting the file scan:

Begin scan in 'F:\病毒样本\3.zip'
F:\病毒样本\3.zip
  [0] Archive type: ZIP
  --> 7.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 6.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.4158
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-5 10:46:05

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\4.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\UPXDND.EXE
2) C:\WINDOWS.0\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\6.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSTEM.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\7.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\CMDBCS.EXE
2) C:\WINDOWS.0\SYSTEM32\CMDBCS.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-5 10:46:05

病毒被抑制

有才

显示全部楼层 · 发表于 2007-9-5 11:10:31

显示全部楼层 · 发表于 2007-9-5 11:24:14

7.exe运行卡巴报。

AntiVir 7.4.1.66 2007.09.04 TR/Dropper.Gen
AVG 7.5.0.485 2007.09.05 PSW.OnlineGames.HXW
BitDefender 7.2 2007.09.05 Generic.PWS.Games.4.67283846
DrWeb 4.33 2007.09.04 MULDROP.Trojan packed by BINARYRES
eSafe 7.0.15.0 2007.09.04 suspicious Trojan/Worm
eTrust-Vet 31.1.5109 2007.09.05 Win32/Frethog!generic
Ikarus T3.1.1.12 2007.09.05 Trojan-PWS.Win32.OnLineGames.wp
Microsoft 1.2803 2007.09.05 PWS:Win32/Lmir.gen!J
NOD32v2 2505 2007.09.04 a variant of Win32/PSW.OnLineGames.YA
Panda 9.0.0.4 2007.09.05 Suspicious file
Rising 19.39.20.00 2007.09.05 Trojan.PSW.Win32.OnlineGames.yfw
Sophos 4.21.0 2007.09.05 Mal/Gampass-A
VBA32 3.12.2.3 2007.09.04 MalwareScope.Trojan-PSW.Game.3
VirusBuster 4.3.26:9 2007.09.04 Trojan.OnlineGames.Gen.32
Webwasher-Gateway 6.0.1 2007.09.05 Trojan.Dropper.Gen

显示全部楼层 · 发表于 2007-9-5 11:25:26

咖啡全飘

[病毒样本] b4f320 eb75c2 1e5688

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源