过卡巴

显示全部楼层 · 发表于 2007-9-30 14:33:36

Roboon：想下载个office2007卸载工具，想不到下了个病毒。我那信任的卡巴啊！过了。
病毒在下面
http://thinkou.gbaopan.com/files/8fe42e9586d24a2eb3f0b23f81e58a84.gbp

显示全部楼层 · 发表于 2007-9-30 14:35:22

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\setup.exe'
C:\Users\morgan\Documents\
setup.exe
[DETECTION] Contains suspicious code HEUR/Crypted
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-30 14:50:36

微点
时间处理结果木马名称木马进程名木马文件创建者
2007-09-30 14:49:47 处理成功未知木马 C:\WINDOWS\SYSTEM32\GDISVC.EXE C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.764\SETUP.EXE
2007-09-30 14:49:43 处理成功未知木马 C:\PROGRAM FILES\COMMON FILES\SYSTEM\GDISERVER.EXE C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.764\SETUP.EXE
2007-09-30 14:49:41 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.764\SETUP.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE

显示全部楼层 · 发表于 2007-9-30 15:00:17

又是改时间，还有没有别的

显示全部楼层 · 发表于 2007-9-30 15:00:42

AVAST!报了："Win32:VB-FGK [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=133731\setup.exe\[UPX]" file.

显示全部楼层 · 发表于 2007-9-30 15:37:58

setup.exe_ - Backdoor.Win32.VB.bne

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2007-9-30 15:39:32

如果对待bug有这样的速度就无敌了

显示全部楼层 · 发表于 2007-9-30 15:53:22

唉，V8就要来了，不知到其它的怎么活

显示全部楼层 · 发表于 2007-9-30 15:54:16

对了，现在NOD几个月更新一次

显示全部楼层 · 发表于 2007-9-30 16:17:05

AhnLab-V3 2007.9.29.0 2007.09.28 -
AntiVir 7.6.0.18 2007.09.28 HEUR/Crypted
Authentium 4.93.8 2007.09.29 -
Avast 4.7.1043.0 2007.09.29 Win32:VB-FGK
AVG 7.5.0.488 2007.09.30 -
BitDefender 7.2 2007.09.30 -
CAT-QuickHeal 9.00 2007.09.29 -
ClamAV 0.91.2 2007.09.30 -
DrWeb 4.33 2007.09.29 Trojan.DownLoader.33781
eSafe 7.0.15.0 2007.09.29 suspicious Trojan/Worm
eTrust-Vet 31.2.5169 2007.09.27 -
Ewido 4.0 2007.09.29 -
FileAdvisor 1 2007.09.30 -
Fortinet 3.11.0.0 2007.09.30 -
F-Prot 4.3.2.48 2007.09.29 -
F-Secure 6.70.13030.0 2007.09.29 -
Ikarus T3.1.1.12 2007.09.30 -
Kaspersky 7.0.0.125 2007.09.30 -
McAfee 5130 2007.09.28 -
Microsoft 1.2803 2007.09.30 -
NOD32v2 2560 2007.09.30 -
Norman 5.80.02 2007.09.28 -
Panda 9.0.0.4 2007.09.30 Suspicious file
Prevx1 V2 2007.09.30 -
Rising 19.42.61.00 2007.09.30 -
Sophos 4.22.0 2007.09.30 Mal/Behav-127
Sunbelt 2.2.907.0 2007.09.28 -
Symantec 10 2007.09.30 -
TheHacker 6.2.6.073 2007.09.28 -
VBA32 3.12.2.4 2007.09.29 -
VirusBuster 4.3.26:9 2007.09.29 -
Webwasher-Gateway 6.0.1 2007.09.28 Heuristic.Crypted

[病毒样本] 过卡巴

本帖子中包含更多资源

回复 6楼 wangjay1980 的帖子