~1129b5

显示全部楼层 · 发表于 2007-9-8 17:30:29

蠕虫？

显示全部楼层 · 发表于 2007-9-8 17:31:03

Start of the scan: 2007年9月8日  17:30

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\ff1b0c4913a00186.rar'
C:\Documents and Settings\Administrator\桌面\ff1b0c4913a00186.rar
  [0] Archive type: RAR
  --> ff1b0c4913a00186.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
   [INFO]    The file was moved to '47136c35.qua'!

End of the scan: 2007年9月8日  17:30
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-8 17:31:06

C:\ABC\ff1b0c4913a00186.rar:\ff1b0c4913a00186.exe - 特征码 'Generic.Popwin' 被发现
C:\ABC\ff1b0c4913a00186.rar

显示全部楼层 · 发表于 2007-9-8 17:32:03

费尔过了

显示全部楼层 · 发表于 2007-9-8 18:32:05

Scan performed at: 2007-9-8 18:31:48
Scanning Log
NOD32 version 2514 (20070908) NT
Command line: C:\Documents and Settings\Don johnson\桌面\ff1b0c4913a00186.rar
Operating memory - is OK

Date: 8.9.2007 Time: 18:31:51
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\ff1b0c4913a00186.rar
C:\Documents and Settings\Don johnson\桌面\ff1b0c4913a00186.rar ?RAR ?ff1b0c4913a00186.exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 18:31:52 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-9-8 19:28:48

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\FF1B0C4913A00186.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\9012A81C.EXE
2) C:\WINDOWS.0\SYSTEM32\83226117.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-8 21:16:26

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\ff1b0c4913a00186.rar/ff1b0c4913a00186.exe//ASPack

显示全部楼层 · 发表于 2007-9-8 22:43:01

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3925
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\ff1b0c4913a00186.exe

C:\Documents and Settings\uhthn\Desktop\ff1b0c4913a00186.exe - Suspicious of Trojan-PSW.Game.8

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-9 10:27:31

卡7报backdoor win32 agent bmx

[病毒样本] ~1129b5

本帖子中包含更多资源

浏览过的版块