反木马间谍区搞来的2个[MD5: 8D277E 711DB0]

显示全部楼层 · 发表于 2007-10-6 07:25:23

http://bbs.kafan.cn/redirect.php?tid=139684&goto=lastpost#lastpost
这里面有，卡巴杀
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\BBBB.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SER2VET.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EEEE.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SERVET.EXE
是否删除木马程序及其衍生物?

[ 本帖最后由微点卫士于 2007-10-6 07:26 编辑 ]

显示全部楼层 · 发表于 2007-10-6 07:29:46

The requested URL http://bbs.kafan.cn/attachment.php?aid=135976 is infected with Virus.Win32.AutoRun.hw virus

显示全部楼层 · 发表于 2007-10-6 07:30:29

已删除：病毒 Virus.Win32.AutoRun.hw 文件　: C:\Users\Administrator\Desktop\样本.rar/bbbb.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Downloader.Win32.Baser.w 文件　: C:\Users\Administrator\Desktop\样本.rar/eeee.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-10-6 07:31:58

显示全部楼层 · 发表于 2007-10-6 07:40:05

TR/Delphi.Downloader.Gen

显示全部楼层 · 发表于 2007-10-6 08:26:42

2007-10-6 8:26:22 1191630382 Administrator 1768 Sign of "Win32:Delf-FVX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本.rar\bbbb.exe\[UPX]" file.
2007-10-6 8:26:25 1191630385 Administrator 1768 Sign of "Win32:Delf-FVX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本.rar\eeee.exe\[UPX]" file.

显示全部楼层 · 发表于 2007-10-6 08:35:04

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\��.rar'
C:\Users\morgan\Documents\
  ��.rar
[0] Archive type: RAR
--> bbbb.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> eeee.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Baser.W.2
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-6 08:39:04

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=135976 is infected with Virus.Win32.AutoRun.hw virus

显示全部楼层 · 发表于 2007-10-6 10:10:32

ewido anti-spyware - 扫描报告
---------------------------------------------------------

+ 创建于: 10:10:16 2007-10-6

+ 扫描结果:

C:\Documents and Settings\zh\桌面\样本.rar/bbbb.exe -> Downloader.Baser.w : 已清除。
C:\Documents and Settings\zh\桌面\样本.rar/eeee.exe -> Downloader.Baser.w : 已清除。

显示全部楼层 · 发表于 2007-10-6 10:21:32

2007-10-6 10:20:25
D:\TDDOWNLOAD\样本(2).RAR.PART Downloader.gen.a (特洛伊)
2007-10-6 10:20:30
D:\TDdownload\样本(2).rar.part\EEEE.EXE Downloader.gen.a (特洛伊)

[病毒样本] 反木马间谍区搞来的2个[MD5: 8D277E 711DB0]

本帖子中包含更多资源

本帖子中包含更多资源