新C版更新完 在安装BOBO ActiveX 控件后 出现假死。。

billboard

BOBO插件 所有文件都报毒，以前版本使用正常，而且使用这个插件的人很多，这样的网站也很多，没见到说带病毒的。

C:\Documents and Settings\Administrator\Local Settings\Temp\BoBoControlUpdate.exe
  [0] Archive type: RAR SFX (self extracting)
  --> BoBo_ActiveX_V3.ocx
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/TurboBob.A.1 Backdoor server programs
      [INFO]      The file was moved to '46eac496.qua'!
C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.281\bobo.exe
  [0] Archive type: RAR SFX (self extracting)
  --> BoBoTurbo\BoBoTurbo.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/TurboBob.A Backdoor server programs
      [INFO]      The file was moved to '46cbd91f.qua'!
C:\Recycled\Dc6.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/TurboBob.A Backdoor server programs
      [INFO]      The file was moved to '47362bcd.qua'!
C:\Recycled\Dc8.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/TurboBob.A Backdoor server programs
      [INFO]      The file was moved to '47382bcd.qua'!
C:\Recycled\Dc9.ocx
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/TurboBob.A.1 Backdoor server programs
      [INFO]      The file was moved to '47392bcd.qua'!


隔离到安全区不查杀也没用
目前只能在安全模式下 删除BOBO控件，才能正常使用。
可我的电信 内网的所有 影视都需要这个插件，有高手能解决的帮分析下。
顺便给这个插件的官网，http://www.17bobo.com/

[ 本帖最后由 billboard 于 2007-10-1 10:37 编辑 ]

周杰伦

监控有没有排除呢？监控也需要排除的，不然，还是会报警的

jimmyleo

确切的名字都报出来了 TurboBob

mofunzone

已经上报，不出意外，周一到周二应该就可以解决了
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files alongside their results can be found below:File ID         Filename         Size (Byte)        Result
1323746         BoBo_ActiveX_V3.exe         432.45 KB         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
BoBo_ActiveX_V3.exe         UNDER ANALYSIS


The file 'BoBo_ActiveX_V3.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

billboard

用这个插件的网很多，这个属于病毒？
最好给个具体 关闭这个 监控的方法。。
菜鸟学习中

billboard

有解决办法就好，等待解禁，要不所有 内网影视都看不了

wxd2958

我就是因为这个插件 才导致前天红伞更新后开机假死的~~~~搞的现在电影都不可以看

jimmyleo

另 值得一提 官网被挂马了 注意

alex2110

用的人多不代表不是病毒。。。