再来一个[MD5: 00F392]

显示全部楼层 · 发表于 2007-10-6 21:06:40

http://flash.958167.com/x.exe

显示全部楼层 · 发表于 2007-10-6 21:09:11

C:\ABC\样本.rar:\x.exe - 特征码 'Trojan-Downloader.Win32.Small.eta' 被发现
C:\ABC\样本.rar

显示全部楼层 · 发表于 2007-10-6 21:09:59

The requested URL http://flash.958167.com/x.exe is infected with Trojan-Downloader.Win32.Small.eta virus
貌似比较老

显示全部楼层 · 发表于 2007-10-6 21:14:00

AVIRA  C
Archive type: RAR
  --> x.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.eta
   [INFO]    The file was deleted!

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious

显示全部楼层 · 发表于 2007-10-6 21:16:46

显示全部楼层 · 发表于 2007-10-6 21:18:44

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Agent.wpn

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.43.50

显示全部楼层 · 发表于 2007-10-6 22:00:47

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 326
Paranoia Database - 6879
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\x.exe

C:\Documents and Settings\uhthn\Desktop\x.exe - Suspected Trojan-Downloader.Small.2

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-7 05:54:31

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\X.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\DRIVERS\KIS6.SYS
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-10-7 08:27:42

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=136336 is infected with Trojan-Downloader.Win32.Small.eta virus

显示全部楼层 · 发表于 2007-10-7 08:59:05

已删除：木马程序 Trojan-Downloader.Win32.Small.eta 文件: F:\10.7\样本.rar/x.exe

[病毒样本] 再来一个[MD5: 00F392]

本帖子中包含更多资源

本帖子中包含更多资源

2/1

浏览过的版块