[病毒样本] 强

显示全部楼层 · 发表于 2008-2-10 22:23:06

已检测到: 木马程序 Backdoor.Win32.PcClient.bbe URL: http://bbs.kafan.cn/attachment.php?aid=198792/TEST 01.EXE//data0000.cab/ok.exe

显示全部楼层 · 发表于 2008-2-10 22:25:08

avast 过

显示全部楼层 · 发表于 2008-2-10 22:26:40

2008-2-10 22:26:07 Kernel File 'F:\virus\TEST_01.zip' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-10 22:26:59

FS
结果: 发现1个恶意软件
Backdoor.Win32.PcClient.bbe (病毒)
C:\Documents and Settings\GUNDAM\桌面\TEST_01.zip\TEST 01.EXE

显示全部楼层 · 发表于 2008-2-10 22:28:52

费尔杀

显示全部楼层 · 发表于 2008-2-10 22:35:14

红伞7 飘~

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   0 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-10 22:58:24

C:\Documents and Settings\Administrator\桌面\TEST_01.zip>>TEST 01.EXE>>emb-0.cab>>ok.exe Backdoor.PcClient.ajh.jmzo 后门还未处理

显示全部楼层 · 发表于 2008-2-10 22:58:48

Trojan.Win32.Undef.agn

显示全部楼层 · 发表于 2008-2-10 22:59:49

2008-02-10 22:55:40 執行應用程序    操作:允許
程序路徑:C:\windows\explorer.exe
檔案路徑:C:\Program Files\Sandboxie\Start.exe
命令列: /box:__ask__ "C:\test\TEST_01\TEST 01.EXE"
觸發規則:所有程序規則->*

2008-02-10 22:55:44 執行應用程序    操作:允許
程序路徑:C:\Program Files\Sandboxie\Start.exe
檔案路徑:C:\test\TEST_01\TEST 01.EXE
觸發規則:所有程序規則->*

2008-02-10 22:55:46 執行應用程序    操作:允許
程序路徑:C:\test\TEST_01\TEST 01.EXE
檔案路徑:C:\Sandbox\JUI\Virus\user\current\Local Settings\Temp\IXP000.TMP\WINMD5~1.EXE
觸發規則:所有程序規則->*

[病毒样本] 强

本帖子中包含更多资源

Rising20.30.60

浏览过的版块