老毒巢挖掘2[8cbccd]

显示全部楼层 · 发表于 2007-9-9 18:11:36

a-squared	3.0.0.123	2007.09.06	2007-09-06	-	11.955
Arcavir	1.0.4	200709081003	2007-09-08	-	1.983
AVAST	1.0.8	000773-3	2007-09-08	-	3.015
AVG	7.5.48.442	269.13.7/992	2007-09-06	-	3.469
BitDefender	7.60825.871824	7.14685	2007-09-09	BehavesLike:Win32.ExplorerHijack	5.356
CA (VET)	8.4.0.24	31.1.5119	2007-09-08	Win32/Frethog!generic trojan.	1.142
ClamAV	0.91.1	4205	2007-09-09	Trojan.Spy-12333	0.008
Comodo	2.11	2.0.0.279	2007-09-09	-	1.794
ewido	4.0.0.2	2007.09.08	2007-09-08	-	3.288
F-SECURE	5.51.6100	2007.09.09.01	2007-09-09	-	2.656
Hauri	20070907	2007.09.07	2007-09-07	-	0.973
IKARUS	T3.1.1.12	2007.09.09.69473	2007-09-09	-	2.621
MKS_VIR	2.01	2007.09.08	2007-09-08	-	1.961
NOD32	2.70.8	2515	2007-09-09	probably a variant of Win32/PSW.OnLineGames.NEP trojan	0.118
nProtect	2007-09-07.00	909334	2007-09-07	-	20.476
QuickHeal	9.00	2007.09.08	2007-09-08	-	2.378
SOPHOS	2.49.1	4.21	2007-09-09	-	2.761
The Hacker	6.1.10	v00182	2007-09-08	-	0.701
VBA32	3.12.2.4	20070908.0321	2007-09-08	-	1.051
VirusBuster	4.3.19:9	9.103.2/11.0	2007-09-08	-	0.989
冰岛杀毒	3.16.16	2007.09.07	2007-09-07	-	0.566
卡巴斯基	5.5.10	2007.09.09	2007-09-09	-	0.044
大蜘蛛	4.33	2007.09.08	2007-09-08	BACKDOOR.Trojan	6.064
小红伞	7.6.0.5	6.39.1.106	2007-09-08	HEUR/Malware	3.901
江民杀毒	10.00.650	2007.09.08	2007-09-08	-	2.947
熊猫卫士	9.04.03.0001	2007.09.08	2007-09-08	-	5.284
瑞星	19.0	19.39.62.00	2007-09-09	-	1.379
诺曼	5.91.07	5.90	2007-09-07	-	9.734
赛门铁克	1.3.0.24	20070908.008	2007-09-08	Infostealer	1.045
趋势	8.500-1001	4.705.00	2007-09-07	-	0.282
迈克菲	5.2.00	5115	2007-09-07	-	1.040
金山毒霸	2007.6.20.249	2007.9.8	2007-09-08	Win32.Troj.OnlineGamesT.nf.94208	0.850

显示全部楼层 · 发表于 2007-9-9 18:36:23

Scan performed at: 2007-9-9 18:35:46
Scanning Log
NOD32 version 2515 (20070909) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\12(1).rar

Date: 9.9.2007 Time: 18:35:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\12(1).rar
D:\Documents and Settings\EKINCHENG\桌面\12(1).rar ?RAR ?12(1).exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 18:35:49 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-9 18:42:38

蜘蛛启发

12(1).rar\12(1).exe;C:\Documents and Settings\Administrator\桌面\12(1).rar;Probably BACKDOOR.Trojan;;
12(1).rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-9-9 19:19:03

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description BACKDOOR.Trojan
Error code: -1603
Requested URL: /attachment.php?aid=125698
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-9 19:40:53

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3961
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\12(1).exe

C:\Documents and Settings\uhthn\Desktop\12(1).exe - Suspicious of Trojan-Downloader.Small.2

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-9 19:48:14

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12(1).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVMYMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVMYMON.DAT
是否删除木马程序及其衍生物?

[病毒样本] 老毒巢挖掘2[8cbccd]

本帖子中包含更多资源