黑网上下的黑东西

显示全部楼层 · 发表于 2007-11-29 16:32:30

Roboon：程序:
D:\我的文档\桌面\SKYPE3053.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\RMVILDWCXTGRI.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-11-29 16:45:10

The file 'Skype3053.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Agent.dob. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

显示全部楼层 · 发表于 2007-11-29 16:58:48

金山 nothing found

显示全部楼层 · 发表于 2007-11-29 16:59:58

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Skype3053.rar'
C:\Documents and Settings\Administrator\桌面\Skype3053.rar
  [0] Archive type: RAR
  --> Skype3053.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    A backup was created as '47c78016.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-29 20:36:49

RX20.20.32不杀。

显示全部楼层 · 发表于 2007-11-29 22:30:38

驱逐舰 miss 了

显示全部楼层 · 发表于 2007-11-29 22:50:41

微点拦截了。。

显示全部楼层 · 发表于 2007-11-30 00:04:16

风云提示 KIS6 删

显示全部楼层 · 发表于 2007-11-30 01:30:47

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 985
Paranoia Database - 49298
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\Skype3053.exe

C:\Documents and Settings\Uhthn\Desktop\Skype3053.exe - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.16

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-11-30 14:05:48

avast found Win32:Baidubar-B [Trj]

[病毒样本] 黑网上下的黑东西

回复 2楼 Graybird 的帖子