avast pass

显示全部楼层 · 发表于 2008-1-29 13:44:58

dll是生成物

显示全部楼层 · 发表于 2008-1-29 13:48:05

2008-1-29 13:48:18 Real-time file system protection file G:\v\df34.exe Win32/Adware.BHO.NBR application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:48:17 Real-time file system protection file G:\v\superfindout.dll Win32/Adware.BHO.NBR application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-1-29 13:50:05

Begin scan in 'C:\Documents and Settings\Administrator\桌面\agent.rar'
C:\Documents and Settings\Administrator\桌面\agent.rar
  [0] Archive type: RAR
  --> df34.exe
    [DETECTION] Is the Trojan horse TR/Drop.Agent.VE

显示全部楼层 · 发表于 2008-1-29 13:55:54

C:\Documents and Settings\gho\桌面\superfindout.dll Puper.dll (Trojan)
2008-1-29 13:55:21 Deleted WHUT-D9193C067E\gho WinRAR.exe C:\Documents and Settings\gho\桌面\df34.exe Puper.dll (Trojan)

显示全部楼层 · 发表于 2008-1-29 14:09:45

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\agent.rar'
C:\Documents and Settings\Administrator\My Documents\
  agent.rar
  agent.rar:Zone.Identifier
[0] Archive type: RAR
--> superfindout.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.YD
      [WARNING] Infected files in archives cannot be repaired!
--> df34.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.VE
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-29 14:52:22

I:\virus\test\df34.exe - Suspect code-parts found (Level: 200)
I:\virus\test\superfindout.dll - Suspect code-parts found (Level: 155)

      2 Files scanned
      (0 Archives with 0 files)
      0 Signatures found
      2 Suspect code-parts found
      Used time: 0:00.109

[ 本帖最后由冷_冷于 2008-1-29 14:59 编辑 ]

显示全部楼层 · 发表于 2008-1-29 16:17:58

木马名称:未知后门程序
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\AGENT\SUPERFINDOUT.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-1-29 20:26:15

rising20.29.12未报！

显示全部楼层 · 发表于 2008-1-29 20:29:30

D:\病毒测试\未解压样本\agent.rar » RAR » superfindout.dll - Win32/Adware.BHO.NBR application
D:\病毒测试\未解压样本\agent.rar » RAR » df34.exe - Win32/Adware.BHO.NBR application

显示全部楼层 · 发表于 2008-1-29 20:36:52

McAfee Puper.dll

[病毒样本] avast pass

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块