opr04XTM.exe [md5:4e4423]

tonger2003

卡巴主防拦住

Graybird

Starting the file scan:

Begin scan in 'E:\Virus\新建文件夹.zip'
E:\Virus\新建文件夹.zip
  [0] Archive type: ZIP
  --> н¨Îļþ¼Ð/fuck[1].js
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Agent.XA
  --> н¨Îļþ¼Ð/serv.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð/services.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð/xunlei[1].js
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Agent.XB
      [WARNING]   The file was ignored!

已上报~

saga3721

程序:
C:\DOCUMENTS AND SETTINGS\TX\桌面\OPR04XTM.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\SERV.EXE
2) C:\WINDOWS\SYSTEM32\COM\SERVICES.EXE
是否删除木马程序及其衍生物?

Graybird

The file 'opr04XTM.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

Graybird

The file 'services.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

zfznbic

这回FSCS7.10扫描就可以发现了哦 。。不错。。上报病毒样本效果就是好。。

gho

yun,咖啡卡巴全miss了

qigang

Rising20.23.21未杀！

qigang

Rising20.23.21同样未杀。

zhuoqingquan

诺顿antibot清除