Win32:Banker-CTF [Wrm]

显示全部楼层 · 发表于 2008-1-28 18:45:31

运行时错误：不能创建Activex对象..

显示全部楼层 · 发表于 2008-1-28 18:48:27

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.IM.Win32.Banker.b

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.29.01

显示全部楼层 · 发表于 2008-1-28 18:57:50

Begin scan in 'C:\Documents and Settings\Administrator\桌面\gusanito.rar'
C:\Documents and Settings\Administrator\桌面\gusanito.rar
  [0] Archive type: RAR
  --> gusanito.exe
   [DETECTION] Contains detection pattern of the worm WORM/Banker.B.1

显示全部楼层 · 发表于 2008-1-28 18:58:34

2008-1-28 18:58:53 Real-time file system protection file G:\v\gusanito.exe Win32/TrojanDownloader.Banload.NTW trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-1-28 19:09:02

大蜘蛛miss了

显示全部楼层 · 发表于 2008-1-28 19:10:06

江民杀掉

显示全部楼层 · 发表于 2008-1-28 19:14:09

C:\Documents and Settings\77\My Documents\gusanito.rar>>gusanito.exe TrojanDownloader.Banload.NTW.fqwb 木马还未处理

显示全部楼层 · 发表于 2008-1-28 19:14:22

Scanning Report
28 January 2008 19:14:15 - 19:14:15
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\gusanito.rar

--------------------------------------------------------------------------------

Result: 1 malware found
IM-Worm.Win32.Banker.b (virus)
C:\Users\Administrator\Desktop\gusanito.rar\gusanito.exe

--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 2
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0

--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-28_02
Spyware: 2008-01-28_02
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-28
F-Secure Libra: 2.04.01, 2008-01-28
F-Secure Orion: 1.02.37, 2008-01-28
F-Secure Draco: 1.00.35, 2008-01-14
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

显示全部楼层 · 发表于 2008-1-28 19:17:45

Trojan.Generic.26466 (BD 引擎)
......................................
这名字有点怪....

显示全部楼层 · 发表于 2008-1-28 19:19:21

ESET
C:\Documents and Settings\GUNDAM\桌面\gusanito.rar » RAR » gusanito.exe - Win32/TrojanDownloader.Banload.NTW trojan

[病毒样本] Win32:Banker-CTF [Wrm]

本帖子中包含更多资源

2/1

本帖子中包含更多资源

浏览过的版块