[病毒样本] 2ge

显示全部楼层 · 发表于 2007-10-10 13:38:31

U盘里面的

显示全部楼层 · 发表于 2007-10-10 13:40:19

The requested URL http://bbs.kafan.cn/attachment.php?aid=137787 is infected with Virus.Win32.VB.h virus

显示全部楼层 · 发表于 2007-10-10 13:51:59

C:\Documents and Settings\Don johnson\桌面\MP3.rar » RAR » MP3.exe - Win32/VB.H virus
C:\Documents and Settings\Don johnson\桌面\MP3.rar » RAR » auto.exe - a variant of Win32/TrojanDownloader.Flux trojan
C:\Documents and Settings\Don johnson\桌面\MP3.rar » RAR » autorun.inf - INF/Autorun virus

显示全部楼层 · 发表于 2007-10-10 14:01:29

symantec

W32.Popwin auto.exe
Trojan Horse mp3.exe

显示全部楼层 · 发表于 2007-10-10 14:24:51

[Scan path] C:\Documents and Settings\Administrator\桌面\MP3.rar
>C:\Documents and Settings\Administrator\桌面\MP3.rar\MP3.exe infected with Win32.HLLW.China
>>C:\Documents and Settings\Administrator\桌面\MP3.rar\auto.exe infected with Trojan.Popwin
>C:\Documents and Settings\Administrator\桌面\MP3.rar\autorun.inf - Ok
C:\Documents and Settings\Administrator\桌面\MP3.rar - archive contains infected objects

显示全部楼层 · 发表于 2007-10-10 14:25:28

Start of the scan: 2007年10月10日  14:25

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\MP3.rar'
C:\Documents and Settings\Administrator\桌面\MP3.rar
  [0] Archive type: RAR
  --> MP3.exe
   [DETECTION] Contains detection pattern of the Windows virus W32/VB.H
  --> auto.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.554 Backdoor server programs
   [INFO]    A backup was created as '473f7092.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-10 14:34:01

2007-10-10 14:33:47 1191998027 Administrator 652 Sign of "Win32:VB-AMP [Trj]" has been found in "D:\Downloads\MP3.rar\MP3.exe" file.
2007-10-10 14:33:50 1191998030 Administrator 652 Sign of "Win32:Agent-GPD [Trj]" has been found in "D:\Downloads\MP3.rar\auto.exe\[NsPack]\[Embedded#4010]\[NsPack]" file.

显示全部楼层 · 发表于 2007-10-10 14:45:52

微点砍掉

显示全部楼层 · 发表于 2007-10-10 16:46:05

detected: virus Virus.Win32.VB.h URL: http://bbs.kafan.cn/attachment.php?aid=137787//MP3.exe
detected: Trojan program Backdoor.Win32.Agent.ahj URL: http://bbs.kafan.cn/attachment.php?aid=137787//auto.exe

显示全部楼层 · 发表于 2007-10-10 16:59:49

kv报三个

[病毒样本] 2ge

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块