再发一个！！貌似木马

显示全部楼层 · 发表于 2008-1-31 23:05:26

费尔报木马

显示全部楼层 · 发表于 2008-1-31 23:07:06

Starting the file scan:

Begin scan in 'E:\newrl.rar'
E:\newrl.rar
  [0] Archive type: RAR
  --> newrl.exe
   [DETECTION] Is the Trojan horse TR/Agent.7912
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-31 23:07:12

ESET
C:\Documents and Settings\GUNDAM\桌面\newrl.rar » RAR » newrl.exe - Win32/TrojanDownloader.Small.NZW trojan

显示全部楼层 · 发表于 2008-1-31 23:14:27

FS 2007-01-31_03 飘，不过virscan说FS能扫到，晕

显示全部楼层 · 发表于 2008-1-31 23:19:31

AVAST和大蜘蛛都被过

这毒挺强的啊，AVK都扫不出

显示全部楼层 · 发表于 2008-1-31 23:21:16

原帖由 wolffshen 于 2008-1-31 23:14 发表
FS 2007-01-31_03 飘，不过virscan说FS能扫到，晕

那就是沙盘报的。

显示全部楼层 · 发表于 2008-1-31 23:21:55

McAfee New Malware.n

显示全部楼层 · 发表于 2008-1-31 23:22:13

微点拦截
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\11\NEWRL.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TMP2E.TMP
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TMP2F.TMP
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-1-31 23:45:14

AVG报了

显示全部楼层 · 发表于 2008-1-31 23:48:08

IK
I:\virus\test\newrl.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found

1 File scanned
(0 Archives with 0 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.000

ClamAV
I:\virus\test/newrl.exe: PUA.Packed.UPack FOUND

----------- SCAN SUMMARY -----------
Known viruses: 199272
Engine version: 0.92
Scanned directories: 1
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Time: 6.171 sec (0 m 6 s)

[病毒样本] 再发一个！！貌似木马

本帖子中包含更多资源