css样本，好多报启发的

显示全部楼层 · 发表于 2008-1-14 12:04:13

卡巴MISS~
费尔
C:\Documents and Settings\Administrator\桌面\bak.rar>>bak.css Heuri.Suspicious.ERNM 启发式扫描还未处理

显示全部楼层 · 发表于 2008-1-14 12:07:46

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: bbs.kafan.cn/attachment.php?aid=184002
Information: Is the Trojan horse TR/Dropper.Gen

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 7.01.00.13, AVE 7.6.0.46, VDF 7.0.1.228

显示全部楼层 · 发表于 2008-1-14 12:34:31

ESET 连probably都不是
C:\Documents and Settings\GUNDAM\桌面\bak.rar » RAR » bak.css - a variant of Win32/TrojanDownloader.Small.HLV trojan

显示全部楼层 · 发表于 2008-1-14 12:50:26

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\bak.rar'
C:\Documents and Settings\Administrator\My Documents\
  bak.rar
[0] Archive type: RAR
   --> bak.css
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
            [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-14 12:52:14

检测到病毒: Win32:Agent-LSI [Trj]
文件: bak.rar
目录: C:\Documents and Settings\Administrator\桌面
进程: Explorer.EXE

显示全部楼层 · 发表于 2008-1-14 19:20:40

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.qv

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.27.02

显示全部楼层 · 发表于 2008-1-14 19:28:53

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.hhm 檔案: C:\Documents and Settings\kato9096\桌面\bak.rar/bak.css//PE_Patch//UPack

显示全部楼层 · 发表于 2008-1-14 21:52:07

原帖由 kgb98 于 2008-1-14 11:42 发表
红伞中等的启发没报~

我的红伞升级到最新的，今天的就报了啊

[病毒样本] css样本，好多报启发的

3/1