2eea4c，MARAN变种，瑞星报壳！

显示全部楼层 · 发表于 2007-9-5 11:31:54

瑞星 19.0 19.39.20.00 2007-09-04 Packer.Mian007

显示全部楼层 · 发表于 2007-9-5 11:34:38

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVER.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\AVP.EXE
2) C:\WINDOWS.0\SYSTEM32\HVSOUND2.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-5 11:36:32

Starting the file scan:

Begin scan in 'F:\病毒样本\server.rar'
F:\病毒样本\server.rar
  [0] Archive type: RAR
  --> server.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-5 11:57:57

detected: Trojan program Trojan-PSW.Win32.Maran.mu URL: http://bbs.kafan.cn/attachment.php?aid=123495//server.exe

显示全部楼层 · 发表于 2007-9-5 15:04:59

已检测到: 木马程序 Trojan-PSW.Win32.Maran.mu URL: http://bbs.kafan.cn/attachment.php?aid=123495//server.exe

显示全部楼层 · 发表于 2007-9-5 15:18:01

最近发过的，前面发的MD5没帖

显示全部楼层 · 发表于 2007-9-5 16:46:20

Start of the scan: Wednesday, 5 September, 2007  16:46

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\server.rar'
C:\Documents and Settings\tim\桌面\server.rar
  [0] Archive type: RAR
  --> server.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    A backup was created as '47506d35.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-5 16:57:13

kv 飘过

显示全部楼层 · 发表于 2007-9-5 18:03:53

server.exe [md5:2eea4c] mofunzone
http://bbs.kafan.cn/viewthread.p ... mp%3Bascdesc%3DDESC
锁吧

显示全部楼层 · 发表于 2007-9-5 18:36:00

重复了

[病毒样本] 2eea4c，MARAN变种，瑞星报壳！

本帖子中包含更多资源