[MD5: 9FC696 5898AA D342C5 65FDE7]

显示全部楼层 · 发表于 2007-10-23 17:10:16

再给大家来几个

显示全部楼层 · 发表于 2007-10-23 17:15:21

2007-10-23 17:15:03 1193130903 Administrator 3736 Sign of "INF:Autorun-B [Trj]" has been found in "D:\Downloads\样本.rar\Autorun.inf" file.
2007-10-23 17:15:07 1193130907 Administrator 3736 Sign of "Win32:Trojan-gen {Other}" has been found in "D:\Downloads\样本.rar\qqemo.exe\$INSTDIR\tmp.tmp" file.
2007-10-23 17:15:07 1193130907 Administrator 3736 Sign of "Win32:Trojan-gen {Other}" has been found in "D:\Downloads\样本.rar\qqemo.exe" file.

显示全部楼层 · 发表于 2007-10-23 17:33:42

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> Autorun.inf
   [DETECTION] Is the Trojan horse TR/Agent.VB.AO.1
  --> HotTool.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.QS
  --> qqemo.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.air.6
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-23 17:38:10

Result: 3 malware found
IS/Autorun (virus)
C:\Users\Administrator\Desktop\Ñù±¾.rar\Autorun.inf
AdWare.Win32.Agent.qs (adware)
C:\Users\Administrator\Desktop\Ñù±¾.rar\HotTool.exe
Trojan-Downloader.NSIS.Agent.k (virus)
C:\Users\Administrator\Desktop\Ñù±¾.rar\qqemo.exe

显示全部楼层 · 发表于 2007-10-23 17:40:34

费尔报一个auto和一个木马！

显示全部楼层 · 发表于 2007-10-23 17:53:16

微点，提示有木马。

[病毒样本] [MD5: 9FC696 5898AA D342C5 65FDE7]

本帖子中包含更多资源

本帖子中包含更多资源