找回被盗的QQ密码.exe及生成物[MD5: EF9F9C 65CE61 8630C2]

显示全部楼层 · 发表于 2007-11-2 20:54:15

一天到晚有这种东西

显示全部楼层 · 发表于 2007-11-2 20:58:16

Starting the file scan:

Begin scan in 'E:\样本2.rar'
E:\样本2.rar
  [0] Archive type: RAR
  --> ÕÒ»Ø±»µÁµÄQQÃÜÂë.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/WinRem Backdoor server programs
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-2 20:59:07

C:\ABC\样本2.rar:\找回被盗的QQ密码.exe - 特征码 'Virus.Win32.Virtualizer' 被发现
C:\ABC\样本2.rar:\jyjgbd.dll - 特征码 'Backdoor.Win32.PcClient.LH' 被发现
C:\ABC\样本2.rar:\jyjgbd.sys - 特征码 'Virus.Win32.Agent.MES' 被发现
C:\ABC\样本2.rar

显示全部楼层 · 发表于 2007-11-2 20:59:37

一个。。。

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本2.rar'
C:\Documents and Settings\Administrator\桌面\样本2.rar
  [0] Archive type: RAR
  --> ÕÒ»Ø±»µÁµÄQQÃÜÂë.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/WinRem Backdoor server programs

显示全部楼层 · 发表于 2007-11-2 20:59:41

[Found possible virus] < (not disinfectable)> C:\ABC\样本2.rar->找回被盗的QQ密码.exe->(Aspack)->(Aspack)
[Found possible virus] < (not disinfectable)> C:\ABC\样本2.rar->jyjgbd.dll->(PE_Patch.MaskPE)
[Found possible virus] <W32/Threat-HLLPEM-based!Maximus (not disinfectable)> C:\ABC\样本2.rar->jyjgbd.sys
[Contains infected objects] C:\ABC\样本2.rar

显示全部楼层 · 发表于 2007-11-2 21:26:39

虽然经常有，但我就是杀不掉，呵呵！

RX20.16.42一个不杀！

显示全部楼层 · 发表于 2007-11-2 21:56:25

C:\Documents and Settings\Don johnson\桌面\样本2.rar » RAR » jyjgbd.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\样本2.rar » RAR » jyjgbd.sys - probably unknown NewHeur_PE virus

显示全部楼层 · 发表于 2007-11-2 22:18:54

detected: Trojan program Backdoor.Win32.PcClient.bal File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾2.rar/jyjgbd.dll//PE_Patch.MaskPE//PE_Patch.MaskPE

显示全部楼层 · 发表于 2007-11-2 22:27:02

AVAST3个

显示全部楼层 · 发表于 2007-11-3 01:08:08

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 786
Paranoia Database - 48413
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (3)

C:\Documents and Settings\Uhthn\Desktop\New Folder (3)\找回被?的QQ密?.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (3)\jyjgbd.dll - Suspected TROJAN-DOWNLOADER (HTTP://...)
C:\Documents and Settings\Uhthn\Desktop\New Folder (3)\jyjgbd.sys - Suspected MaliciousScope:GENERIC.MALWARE.30

3 Files scanned
0 Infected files found
2 Suspected files found
0 Files disinfected
0 Files deleted

[病毒样本] 找回被盗的QQ密码.exe及生成物[MD5: EF9F9C 65CE61 8630C2]

本帖子中包含更多资源

2个

本帖子中包含更多资源

浏览过的版块