【fd4396】挖掘2

显示全部楼层 · 发表于 2007-9-9 14:17:00

来源：
http://bbs.kafan.cn/redirect.php?tid=128592&goto=lastpost#lastpost

显示全部楼层 · 发表于 2007-9-9 14:20:10

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=125638 is infected with Heur.Downloader virus

显示全部楼层 · 发表于 2007-9-9 14:22:07

Begin scan in 'E:\病毒\good.rar'
E:\病毒\good.rar
  [0] Archive type: RAR
  --> good.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
   [WARNING] The file was ignored!

阿米对挖掘有嗜好。。。

显示全部楼层 · 发表于 2007-9-9 14:34:22

常见的东东 ..

E s s ..a variant of Win32/PSW.Delf.NIY trojan

显示全部楼层 · 发表于 2007-9-9 14:35:45

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\GOOD.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM6.JUP
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM6.INS
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-9 14:36:30

显示全部楼层 · 发表于 2007-9-9 14:38:16

瑞星过..

显示全部楼层 · 发表于 2007-9-9 14:48:51

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description Trojan.PWS.Gamania.origin
Error code: -1602
Requested URL: /attachment.php?aid=125638
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-9 14:51:52

卡7报启发

显示全部楼层 · 发表于 2007-9-9 19:37:59

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3961
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\good.exe

C:\Documents and Settings\uhthn\Desktop\good.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] 【fd4396】挖掘2

本帖子中包含更多资源

本帖子中包含更多资源