b34900 附anubis的沙盘报告

显示全部楼层 · 发表于 2007-11-29 14:50:39

[0] Archive type: RAR
--> setup.exe
   [1] Archive type: RAR SFX (self extracting)
   --> Setup.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-29 15:34:52

微点砍掉

显示全部楼层 · 发表于 2007-11-29 16:31:21

deleted: Trojan program Trojan.Win32.Agent.daa File: C:\Documents and Settings\Owner\×ÀÃæ\setup.rar/setup.exe/Setup.exe

显示全部楼层 · 发表于 2007-11-29 16:43:10

Roboon：程序:
D:\我的文档\桌面\SETUP.EXE
可疑程序生成以下文件:
1) C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\RARSFX0\SETUP.EXE
是否阻止该进程继续运行?

显示全部楼层 · 发表于 2007-11-29 18:21:04

Starting the file scan:

Begin scan in 'E:\setup.rar'
E:\setup.rar
  [0] Archive type: RAR
--> setup.exe
   [1] Archive type: RAR SFX (self extracting)
   --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Agent.czh.1
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-29 18:55:00

TF......

显示全部楼层 · 发表于 2007-11-29 20:35:18

RX20.20.32还是不杀。

[病毒样本] b34900 附anubis的沙盘报告

本帖子中包含更多资源

回复 2楼 Graybird 的帖子

本帖子中包含更多资源