[病毒样本] 1+6

显示全部楼层 · 发表于 2008-1-27 22:16:19

INSTALL_CB.EXE ->原文件
其他 ->生成物
From:
http://216.40.219.141/dw.php

运行时居然在前台弹出个CMD窗口提示“已复制 1个文件”...倒...

显示全部楼层 · 发表于 2008-1-27 22:17:12

未知木马后门微点拦截

[ 本帖最后由 Nblock 于 2008-1-27 22:20 编辑 ]

显示全部楼层 · 发表于 2008-1-27 22:18:18

卡巴一个都不报，上报

显示全部楼层 · 发表于 2008-1-27 22:18:58

测试一下吧

显示全部楼层 · 发表于 2008-1-27 22:21:01

rising20.28.62未杀一个哎！

显示全部楼层 · 发表于 2008-1-27 23:02:00

Sign of "Win32:Agent-LTS [Trj]" has been found in "F:\0127.rar\bgrlsmn.dll" file.
Sign of "Win32:Agent-LTS [Trj]" has been found in "F:\0127.rar\nsv291.tmp" file.
Sign of "Win32:Agent-LTS [Trj]" has been found in "F:\0127.rar\install_cb.exe\$TEMP\$1$2\bgrlsmn.dll" file.

显示全部楼层 · 发表于 2008-1-27 23:02:24

FS 2008-01-26_03 过

显示全部楼层 · 发表于 2008-1-27 23:06:53

Hello,

adsoowf.dll,
install_cb.exe_ - not-a-virus:AdWare.Win32.Vapsup.aha,

bgrlsmn.dll - not-a-virus:AdWare.Win32.Vapsup.ahb,

dntpkwolxs.dll - not-a-virus:AdWare.Win32.Vapsup.ahc,

ekxdvft.dll - not-a-virus:AdWare.Win32.Vapsup.ahd,

ffvrdgt.exe_ - not-a-virus:AdWare.Win32.Vapsup.ahe

These files are Advertizing Tools, theirs detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

nsv291.tmp_

No malicious code was found in this file.

Please quote all when answering.

显示全部楼层 · 发表于 2008-1-27 23:36:01

显示全部楼层 · 发表于 2008-1-27 23:41:28

红伞灭。。呵呵

[病毒样本] 1+6

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块