转KV论坛

显示全部楼层 · 发表于 2007-9-25 17:07:24

2007-09-25 17:07:41 应用程序保护(运行应用程序) 操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\dodolook367\my_70147.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\tempaq
命令行:70147

显示全部楼层 · 发表于 2007-9-25 18:04:18

[:27:]

显示全部楼层 · 发表于 2007-9-25 18:13:20

我来试一试

显示全部楼层 · 发表于 2007-9-25 20:33:40

dodolook367.exe>>$TEMP\$TEMP\1629.exe>>$TEMPDoSSSetup.dll
Trojan.Win32.Dodolook.ag
dodolook367.exe>>$TEMP\$TEMP\1629.exe>>$TEMPacpidisk.sys
Trojan.Win32.Dodolook.af

显示全部楼层 · 发表于 2007-9-25 20:49:31

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description Trojan.Cinmeng.A, Generic.Adw.Cinmus.2.E3F46FB3, BehavesLike:Trojan.Downloader
Error code: -1602
Requested URL: /attachment.php?aid=131761
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-26 15:20:42

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 243
Paranoia Database - 5802
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\dodolook367.exe - Suspicious of Adware
C:\Documents and Settings\uhthn\Desktop\New Folder\my_70147.exe - Suspicious of Trojan-Downloader.Small.2

2 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] 转KV论坛

本帖子中包含更多资源

RS