小a

显示全部楼层 · 发表于 2007-9-17 18:00:46

快杀

显示全部楼层 · 发表于 2007-9-17 18:06:39

Start of the scan: 2007年9月17日  18:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\backup-20070915-185708-849-2.rar'
C:\Documents and Settings\Administrator\桌面\backup-20070915-185708-849-2.rar
  [0] Archive type: RAR
  --> backup-20070915-185708-849-2.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.ghd
   [INFO]    A backup was created as '47515278.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-17 18:26:16

NOD32
D:\av\backup-20070915-185708-849-2.rar >>RAR >>backup-20070915-185708-849-2.exe >>NSIS >>f03WtR1066.exe - Win32/TrojanDownloader.VB.AW 木马的变种
卡6
已检测: 木马程序 Trojan-Downloader.Win32.VB.bgd 文件: D:\av\backup-20070915-185708-849-2.rar/backup-20070915-185708-849-2.exe//PE_Patch.UPX//UPX//data0005

显示全部楼层 · 发表于 2007-9-17 18:34:37

红伞总算能报NSIS了

用 /NCRC 命令行执行后AntiBot杀出一个

[ 本帖最后由 solcroft 于 2007-9-17 20:10 编辑 ]

显示全部楼层 · 发表于 2007-9-17 18:36:28

2007-9-17 18:36:13 1190025373 Administrator 2716 Sign of "Win32:VB-ESB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\backup-20070915-185708-849-2.rar\backup-20070915-185708-849-2.exe\$SYSDIR\f03WtR\f03WtR1066.exe" file.

显示全部楼层 · 发表于 2007-9-17 19:35:30

卡巴 7.0.0.125
已检测到: 木马程序 Trojan-Downloader.Win32.VB.bgd URL: http://bbs.kafan.cn/attachment.php?aid=128964//backup-20070915-185708-849-2.exe//PE_Patch.UPX//UPX//data0005

显示全部楼层 · 发表于 2007-9-17 22:09:07

D:\Documents and Settings\EKINCHENG\桌面\backup-20070915-185708-849-2.rar - a variant of Win32/TrojanDownloader.VB.AW trojan - deleted - quarantined
D:\Documents and Settings\EKINCHENG\桌面\backup-20070915-185708-849-2.rar » RAR » backup-20070915-185708-849-2.exe - a variant of Win32/TrojanDownloader.VB.AW trojan
D:\Documents and Settings\EKINCHENG\桌面\backup-20070915-185708-849-2.rar » RAR » backup-20070915-185708-849-2.exe » NSIS » f03WtR1066.exe - a variant of Win32/TrojanDownloader.VB.AW trojan
D:\Documents and Settings\EKINCHENG\桌面\backup-20070915-185708-849-2.rar » RAR » backup-20070915-185708-849-2.exe » UPX v12_m2 - a variant of Win32/TrojanDownloader.VB.AW trojan
D:\Documents and Settings\EKINCHENG\桌面\backup-20070915-185708-849-2.rar » RAR » backup-20070915-185708-849-2.exe » UPX v12_m2 » NSIS » f03WtR1066.exe - a variant of Win32/TrojanDownloader.VB.AW trojan

显示全部楼层 · 发表于 2007-9-17 22:09:59

Result: 1 malware found
Trojan-Downloader.Win32.VB.bgd (virus)

* C:\Documents and Settings\1\×ÀÃæ\backup-20070915-185708-849-2.rar\backup-20070915-185708-849-2.exe

显示全部楼层 · 发表于 2007-9-18 05:46:20

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: bbs.kafan.cn/attachment.php?aid=128964
Information: Is the Trojan horse TR/Dldr.VB.ghd

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 7.01.00.11, AVE 7.6.0.10, VDF 6.39.1.140

小a

本帖子中包含更多资源

本帖子中包含更多资源