再继续挖掘[B8742E]

显示全部楼层 · 发表于 2007-9-30 18:42:27

笑得有点淫荡
Scan performed at: 2007-9-30 18:41:52
Scanning Log
NOD32 version 2560 (20070930) NT
Command line: C:\Documents and Settings\Don johnson\桌面\update.rar
Operating memory - is OK

Date: 30.9.2007 Time: 18:41:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\update.rar
C:\Documents and Settings\Don johnson\桌面\update.rar ?RAR ?update.exe - a variant of Win32/TrojanDownloader.Banload.ZK trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 18:41:55 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-30 18:45:06

脱个壳再来挖

显示全部楼层 · 发表于 2007-9-30 18:46:49

突然发现就这几个东西连来连去
没别的了

显示全部楼层 · 发表于 2007-9-30 18:56:18

显示全部楼层 · 发表于 2007-9-30 19:23:13

rising2008不杀

显示全部楼层 · 发表于 2007-9-30 19:23:52

detected: Trojan program Trojan-Downloader.Win32.Banload.dso URL: http://bbs.kafan.cn/attachment.php?aid=133843//update.exe//ASPack

显示全部楼层 · 发表于 2007-9-30 21:48:43

已删除：木马程序 Trojan-Downloader.Win32.Banload.dso 文件: F:\9.30\update.rar/update.exe//ASPack

显示全部楼层 · 发表于 2007-9-30 21:52:43

--> update.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    A backup was created as '4773aa4e.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-30 22:17:02

Scanning Log
Version of virus signature database: 2534 (20070917)
Date: 30.9.2007 Time: 22:17:40
Scanned disks, folders and files: G:\v\update.rar
G:\v\update.rar » RAR » update.exe - a variant of Win32/TrojanDownloader.Banload.ZK trojan

[病毒样本] 再继续挖掘[B8742E]

本帖子中包含更多资源

回复 2楼 EQ2 的帖子

本帖子中包含更多资源