全是启发？？？？？

显示全部楼层 · 发表于 2007-10-30 15:01:11

我的天啊
反病毒引擎版本最后更新扫描结果
AhnLab-V3 2007.10.30.0 2007.10.30 -
AntiVir 7.6.0.30 2007.10.29 TR/Drop.Agent.RS.2
Authentium 4.93.8 2007.10.29 is a security risk or a \"backdoor\" program
Avast 4.7.1074.0 2007.10.29 Win32:Agent-LL
AVG 7.5.0.503 2007.10.29 Downloader.Generic.EPY
BitDefender 7.2 2007.10.30 Trojan.Downloader.Agent.RS
CAT-QuickHeal 9.00 2007.10.29 TrojanDownloader.Agent.rs
ClamAV 0.91.2 2007.10.30 Trojan.Downloader.Small-738
DrWeb 4.44.0.09170 2007.10.30 Trojan.Ishop
eSafe 7.0.15.0 2007.10.28 Win32.Agent.rs
eTrust-Vet 31.2.5253 2007.10.30 -
Ewido 4.0 2007.10.29 Downloader.Agent.rs
FileAdvisor 1 2007.10.30 -
Fortinet 3.11.0.0 2007.10.19 W32/Agent.RS!tr
F-Prot 4.3.2.48 2007.10.29 W32/Malware!bf44
F-Secure 6.70.13030.0 2007.10.30 Agent.KAM
Ikarus T3.1.1.12 2007.10.30 Trojan.Ishop
Kaspersky 7.0.0.125 2007.10.30 -
McAfee 5151 2007.10.29 Downloader-ADT
Microsoft 1.2908 2007.10.30 TrojanDownloader:Win32/AF
NOD32v2 2626 2007.10.30 Win32/TrojanDownloader.Agent.RS
Norman 5.80.02 2007.10.29 -
Panda 9.0.0.4 2007.10.30 Trj/Agent.AKI
Prevx1 V2 2007.10.30 -
Rising 19.47.10.00 2007.10.30 Trojan.DL.Agent.vp
Sophos 4.23.0 2007.10.30 Troj/Dloader-RV
Sunbelt 2.2.907.0 2007.10.29 Trojan-Downloader.AF
附加信息
File size: 32592 bytes
MD5: 7689a9be616b53b4bdb7bcf81197a091
SHA1: 296e29e0a00bfecddf9aa586eb70cc253951c448
packers: UPX
packers: UPX, UPX

显示全部楼层 · 发表于 2007-10-30 15:03:48

Starting the file scan:

Begin scan in 'E:\helper.rar'
E:\helper.rar
  [0] Archive type: RAR
  --> helper.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Agen.rs.2.A
   [INFO]    The file was deleted!

Starting the file scan:

Begin scan in 'E:\aclayer.rar'
E:\aclayer.rar
  [0] Archive type: RAR
  --> aclayer.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.RS.2
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-30 15:04:09

下载者就叫启发？？晕

显示全部楼层 · 发表于 2007-10-30 15:22:04

F:\aclayer.rar:<RAR>\aclayer.exe:<SFX>\WINDOWS\System32\aclayer.dll : infected Trojan-Downloader.Win32.Agent.rs

显示全部楼层 · 发表于 2007-10-30 16:49:02

木马名称:Trojan-Downloader.Win32.Delf.da

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ACLAYER\ACLAYER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-10-30 18:58:58

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Agent.xsy

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.16.12

显示全部楼层 · 发表于 2007-10-30 20:30:02

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 736
Paranoia Database - 48287
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\helper.dll - Suspected TROJAN-DOWNLOADER (HTTP://{REMOVED}/...)
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\aclayer.exe - Suspected MaliciousScope:GENERIC.MALWARE.1

2 Files scanned
0 Infected files found
2 Suspected files found
0 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-10-30 23:47:29

用咔吧的有空上报一下，貌似主防什么反应。

显示全部楼层 · 发表于 2007-10-31 00:25:22

红伞报了名的，怎么叫启发呢？

显示全部楼层 · 发表于 2007-10-31 01:04:35

avast!
http://bbs.kafan.cn/attachment.php?aid=146489\helper.dll [L] Win32:Alhel [Adw] (0)
http://bbs.kafan.cn/attachment.php?aid=146490\aclayer.exe [L] Win32:Trojan-gen {UPX} (0)

[病毒样本] 全是启发？？？？？

本帖子中包含更多资源

6/2