123
返回列表 发新帖
楼主: foundking
收起左侧

[病毒样本] 原来矮人DOS工具箱是木马程序?

[复制链接]
wolffshen
发表于 2008-2-15 00:29:58 | 显示全部楼层
这个上报很久了,FS一直不认为是误报。
这个url是在用户不知情的情况下直接强制添加的,老外的想法就是...,呵呵
Hello,

Thank you for your email.

We have looked into your concern, and here is the summary:

The file  ARFV.exe, once executed, will automatically modify your favorites, and add an entry pointing to a certain URL, this is done without the users knowledge.

With regard to your concern if the URL file is dangerous, this is a component file used by the main application to edit your favorites folder, by it self it will not do any harm on your system.

However, as of this moment, the URL is no longer accessible. If you are using this please let us know.

Hope this helps, and have a nice day.

--
F-Secure Security Labs              http://www.f-secure.com/weblog/
F-Secure Corporation                http://www.f-secure.com/
BE SURE.
sam.to
发表于 2008-2-15 15:41:49 | 显示全部楼层
Hello.

ARFV.exe_ - Trojan.RAR.Qfavorites.a

This file should be detected and this already detected.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-26 09:23 , Processed in 0.087238 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表