4个[MD5: 64085D 08ED3C 9F70A7 3450CD]

显示全部楼层 · 发表于 2007-12-1 23:51:01

木马名称:未知后门程序

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\样本1\IEXPLROER.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-12-1 23:51:36

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\样本1\UPBHO.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\_TMP.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-12-2 00:08:05

Scan Log
Version of virus signature database: 2696 (20071130)
Date: 2007-12-2 Time: 0:04:28
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\样本2.rar
C:\Documents and Settings\Administrator\桌面\样本2.rar » RAR » as.exe - Win32/Jalous.M worm
Number of scanned objects: 5
Number of threats found: 1
Time of completion: 00:04:34 Total scanning time: 6 sec (00:00:06)

显示全部楼层 · 发表于 2007-12-2 03:55:31

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 985
Paranoia Database - 49298
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\flyage.dll - Suspected WIN32.TROJAN-DROPPER.RIME.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\lo.dll - Suspected WIN32.TROJAN-DROPPER.RIME.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\ctfm0n.exe - Infected WIN32.TROJAN-DOWNLOADER.DELF.20 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\as.exe - Infected GENERIC.MALWARE.333.81B4 - Deleted

4 Files scanned
2 Infected files found
2 Suspected files found
0 Files disinfected
2 Files deleted

[病毒样本] 4个[MD5: 64085D 08ED3C 9F70A7 3450CD]