网页木马~~测试

显示全部楼层 · 发表于 2008-2-9 00:16:46

感谢~

ESET

2008-2-9 0:15:23 HTTP filter file http://wobao.9k9k.cn/123.exe probably a variant of Win32/Genetik trojan connection terminated - quarantined WWW-47C1AB899C6\Administrator Threat was detected upon access to web by the application: D:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe.

显示全部楼层 · 发表于 2008-2-9 00:35:46

IK
I:\virus\123.exe - Signature 'Trojan-Spy.Win32.Delf.GI' found

1 File scanned
(0 Archives with 0 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.047

显示全部楼层 · 发表于 2008-2-9 00:40:48

我双击后，微点没反应啊。
发现进程多拉个CMD。EXE
结束后没发现异常。
有事吗？我好怕怕啊。我是单奔微点啊。这毒有啥动作？难道是批处理？
那我完啦

显示全部楼层 · 发表于 2008-2-9 00:44:31

我的预升级版微点提示未知间谍程序

显示全部楼层 · 发表于 2008-2-9 00:49:09

高度可疑，可能是针对卡巴改的
Scan taken on 08 Feb 2008 16:39:11 (GMT)
A-Squared
Found nothing
AntiVir
Found BDS/Hupigon.Gen
ArcaVir
Found Trojan.Hupigon.Aojq
Avast
Found Win32:Agent-BPB
AVG Antivirus
Found Generic9.AKIF
BitDefender
Found Backdoor.Agent.ZAY
ClamAV
Found Trojan.Delf-911
CPsecure
Found BackDoor.W32.Agent.agx
Dr.Web
Found BackDoor.Huai.origin
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found Trojan-Spy.Win32.Banker.enw
Kaspersky Anti-Virus
Found nothing
NOD32
Found probably a variant of Win32/Genetik (probable variant)
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found Mal/Dropper-G
VirusBuster
Found nothing
VBA32
Found MalwareScope.Trojan-PSW.Game.14

显示全部楼层 · 发表于 2008-2-9 00:51:28

我想知道这病毒运行后有啥危害？我的运行啦。。。。。

显示全部楼层 · 发表于 2008-2-9 02:01:46

http://www.loveyoushipin.com/pic.cab
http://www.loveyoushipin.com/pic.exe

显示全部楼层 · 发表于 2008-2-9 02:05:06

F:\virus\pic.cab » CAB » pic.exe - a variant of Win32/Jalous worm
F:\virus\pic.exe - a variant of Win32/Jalous worm

显示全部楼层 · 发表于 2008-2-9 06:56:09

Starting the file scan:

Begin scan in 'E:\pic.cab'
E:\pic.cab
  [0] Archive type: CAB (Microsoft)
  --> pic.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!
Begin scan in 'E:\pic.exe'
E:\pic.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-9 10:01:14

谢谢大家了

[病毒样本] 网页木马~~测试

回复 8楼 gho 的帖子&回复 9楼 wolffshen 的帖子

回复 8楼 gho 的帖子

本帖子中包含更多资源

回复 17楼 csscz.love 的帖子

回复 17楼 csscz.love 的帖子