[病毒样本] 1

显示全部楼层 · 发表于 2007-11-13 22:51:50

Kaspersky Internet Security 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=153006 is infected with Backdoor.Win32.Popwin.amm virus

显示全部楼层 · 发表于 2007-11-13 22:56:05

监控挂，防御报

显示全部楼层 · 发表于 2007-11-13 22:57:03

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹\MOST[1].EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\EB3FC60C.EXE
2) C:\WINDOWS\SYSTEM32\E5046A58.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-11-13 23:20:29

一个木马病毒~

显示全部楼层 · 发表于 2007-11-13 23:34:13

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\most[1].rar'
C:\Documents and Settings\Administrator\桌面\most[1].rar
  [0] Archive type: RAR
  --> most[1].exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-13 23:49:57

费尔过。

显示全部楼层 · 发表于 2007-11-14 01:01:30

AVAST报

显示全部楼层 · 发表于 2007-11-14 01:32:00

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 866
Paranoia Database - 48728
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\most[1].exe

C:\Documents and Settings\Uhthn\Desktop\most[1].exe - Infected BACKDOOR.AGENT.9 - Deleted

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files disinfected
1 Files deleted

显示全部楼层 · 发表于 2007-11-14 07:33:14

C:\Documents and Settings\Don johnson\桌面\most[1].rar » RAR » most[1].exe - a variant of Win32/TrojanDownloader.Flux trojan

[病毒样本] 1

本帖子中包含更多资源