喝早茶了样本

显示全部楼层 · 发表于 2007-10-2 08:24:15

这个好象卡巴不报诶

显示全部楼层 · 发表于 2007-10-2 08:26:32

2007-10-2 8:26:04 1191284764 SYSTEM 1288 Sign of "Win32:Lineage-590 [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=134493\CFC55D83.exe" file.

显示全部楼层 · 发表于 2007-10-2 08:26:43

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\CFC55D83.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\05905618.DLL
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\05905618.DAT
3) C:\WINDOWS.0\HELP\05905618.CHM
是否删除木马程序及其衍生物?

珍珠奶茶真好喝

显示全部楼层 · 发表于 2007-10-2 08:27:01

NOD32报孺虫

显示全部楼层 · 发表于 2007-10-2 08:27:34

红伞杀

显示全部楼层 · 发表于 2007-10-2 08:30:36

NIS 报

显示全部楼层 · 发表于 2007-10-2 08:31:28

显示全部楼层 · 发表于 2007-10-2 09:36:47

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Trojan.Agent.AAKX

显示全部楼层 · 发表于 2007-10-2 09:52:29

显示全部楼层 · 发表于 2007-10-2 11:24:29

CFC55D83.exe_ - Worm.Win32.Delf.do

[病毒样本] 喝早茶了样本

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源