ORCA目录下的

显示全部楼层 · 发表于 2007-12-8 22:52:00

FS:
结果: 发现1个恶意软件
AdWare.Win32.TTC.b (adware)
C:\Documents and Settings\GUNDAM\桌面\meso43855.rar\meso43855.dll

显示全部楼层 · 发表于 2007-12-9 00:52:52

上报eset

显示全部楼层 · 发表于 2007-12-9 01:42:31

费尔报的是广告程序

显示全部楼层 · 发表于 2007-12-9 09:08:37

C:\ABC\meso43855.rar:\meso43855.dll - 特征码 'not-a-virus:AdWare.Win32.TTC.b' 被发现
C:\ABC\meso43855.rar

显示全部楼层 · 发表于 2007-12-9 11:22:17

not-a-virus:AdWare.Win32.TTC.b

显示全部楼层 · 发表于 2007-12-10 18:56:23

The file 'meso43855.dll' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/TTC.B.1. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 6.39.00.60.

[病毒样本] ORCA目录下的

浏览过的版块