today was two

显示全部楼层 · 发表于 2008-1-18 17:58:38

这次奇迹的是 NOD一个不杀

显示全部楼层 · 发表于 2008-1-18 18:00:51

Starting the file scan:

Begin scan in 'E:\��.rar'
E:\��.rar
  [0] Archive type: RAR
--> SYSTEM32.rar
   [1] Archive type: RAR
   --> itvbru.dll
      [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

上报~

3649293    88d107267c491e70.exe    2.19 KB    CLEAN
197880    444444~1.EXE    0 Byte    CLEAN
436417    0003ed3c.inc    1 Byte    KNOWN CLEAN
1043940    COMMAND.COM    49.7 KB    KNOWN CLEAN
510856    DOSX.EXE    52.59 KB    KNOWN CLEAN
233779    HIMEM.SYS    4.66 KB    KNOWN CLEAN
3649362    itvbru.dll    89.57 KB    UNDER ANALYSIS
233777    KB16.COM    14.37 KB    KNOWN CLEAN
75012    MSCDEXNT.EXE    817 Byte    KNOWN CLEAN
90428    REDIR.EXE    3.26 KB    KNOWN CLEAN

[ 本帖最后由 Graybird 于 2008-1-18 18:01 编辑 ]

显示全部楼层 · 发表于 2008-1-18 18:10:05

Trojan.Win32.Undef.brd

显示全部楼层 · 发表于 2008-1-18 18:44:15

已删除: 木马程序 Backdoor.Win32.PcClient.atg 文件: F:\病毒样本\桌面.rar/SYSTEM32.rar/itvbru.dll

显示全部楼层 · 发表于 2008-1-18 18:52:41

kv2008，不认识

红伞表现真是突出

显示全部楼层 · 发表于 2008-1-18 19:14:54

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.brd

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.27.42

显示全部楼层 · 发表于 2008-1-18 20:08:37

The file 'itvbru.dll' has been determined to be 'MALWARE'. Our analysts named the threat BDS/Pcclient.atg.1. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

显示全部楼层 · 发表于 2008-1-18 21:01:04

2008-1-18 21:00:47 Kernel File 'D:\firefox download\桌面\SYSTEM32\itvbru.dll' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-1-18 21:19:30

已删除：木马程序 Backdoor.Win32.PcClient.atg 文件　: G:\Temp\桌面.rar/SYSTEM32.rar/itvbru.dll

[病毒样本] today was two

本帖子中包含更多资源

11/1

回复 2楼 Graybird 的帖子