可疑

显示全部楼层 · 发表于 2007-10-7 00:45:52

可疑

显示全部楼层 · 发表于 2007-10-7 00:49:16

AVIRA C
Archive type: RAR
  --> qdshm.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> addrmshelp.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 301#.exe
   [DETECTION] Is the Trojan horse TR/Agent.TTJ.1
   [INFO]    The file was deleted!

   0 Scanning directories
   4 Files were scanned
   2 viruses and/or unwanted programs were found
   1 Files were classified as suspicious

显示全部楼层 · 发表于 2007-10-7 01:17:15

已检测: 木马程序 Trojan.Win32.Agent.bvu 文件: D:\anti\桌面.rar/301#.exe

显示全部楼层 · 发表于 2007-10-7 05:52:14

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\301#.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\301#.AXV
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-10-7 06:42:14

2007-10-7 6:41:53 1191710513 Administrator 2412 Sign of "Win32:Onlinegames-BEG [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\桌面.rar\addrmshelp.dll\[Upack]" file.
2007-10-7 6:41:55 1191710515 Administrator 2412 Sign of "Win32:VB-FBX" has been found in "C:\Documents and Settings\Administrator\桌面\桌面.rar\301#.exe" file.

显示全部楼层 · 发表于 2007-10-7 07:01:59

The requested URL http://bbs.kafan.cn/attachment.php?aid=136405 is infected with Trojan-PSW.Win32.WOW.zc virus
不是可疑是本来就是

显示全部楼层 · 发表于 2007-10-7 08:01:34

NOD32 不报

显示全部楼层 · 发表于 2007-10-7 09:00:09

已删除：木马程序 Trojan-PSW.Win32.WOW.zc 文件: F:\10.7\桌面1.rar/addrmshelp.dll//UPack
已删除：木马程序 Trojan.Win32.Agent.bvu 文件: F:\10.7\桌面1.rar/301#.exe

显示全部楼层 · 发表于 2007-10-7 09:12:10

貌似应该属于恶意软件

显示全部楼层 · 发表于 2007-10-7 09:41:55

大蜘蛛漂了

[病毒样本] 可疑

本帖子中包含更多资源

Malware

浏览过的版块