MSN最新样本(MD5: 07e1c0)

显示全部楼层 · 发表于 2007-9-19 16:55:46

Die Datei 'C:\Documents and Settings\TX\桌面\WinBool32.rar'
enthielt einen Virus oder unerwünschtes Programm 'WORM/Agent.AL.4' [worm].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen "475ee441.qua" verschoben!

红伞已经补上了？

显示全部楼层 · 发表于 2007-9-19 16:55:47

C:\Documents and Settings\uhthn\Desktop\New Folder\WinBool32.exe - Infected with SDB:Backdoor.ircbot.sq - Deleted

显示全部楼层 · 发表于 2007-9-19 17:40:54

The requested URL http://bbs.kafan.cn/attachment.php?aid=129512 is infected with P2P-Worm.Win32.Agent.al virus

显示全部楼层 · 发表于 2007-9-23 16:35:15

msn病毒可真多啊！不知是不是用的最新的漏洞编的？

显示全部楼层 · 发表于 2007-9-23 16:44:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\Desktop\WinBool32.rar'
C:\Documents and Settings\Administrator\Desktop\WinBool32.rar
  [0] Archive type: RAR
  --> WinBool32.exe
   [DETECTION] Contains detection pattern of the worm WORM/Agent.AL.4
   [INFO]    A backup was created as '4764278d.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-23 20:57:18

瑞星
C:\Documents and Settings\wujiawei\Local Settings\Temporary Internet Files\Content.IE5\1C7DU9HB\WinBool32[1].rar>>WinBool32.exe
Trojan.Win32.Agent.yqd

显示全部楼层 · 发表于 2007-9-23 21:34:03

原帖由 qwerasdf123 于 2007-9-19 09:33 发表
红伞扫描 pass

9-23号红伞报了

显示全部楼层 · 发表于 2007-9-23 21:47:50

没升级的微点已知

Characteristic base: 1.6.447.070920
Update time: 2007-09-20 17:18:30

[病毒样本] MSN最新样本(MD5: 07e1c0)

本帖子中包含更多资源

浏览过的版块