假装-该页无法显示的半老不新的网马~

显示全部楼层 · 发表于 2008-2-11 13:50:50

没有杀软监控

不过hips也不报
TEMP也扫过没有毒

显示全部楼层 · 发表于 2008-2-11 13:51:41

偶知道．．

显示全部楼层 · 发表于 2008-2-11 15:04:47

Starting the file scan:

Begin scan in 'E:\virus\down.exe'
E:\virus\down.exe
[DETECTION] Is the Trojan horse TR/Dldr.Agent.ibm.6
[INFO] The file was deleted!

显示全部楼层 · 发表于 2008-2-11 15:39:01

我一进这帖就报毒

显示全部楼层 · 发表于 2008-2-11 19:06:06

不是吧~~·监控软件也太霸道了。。。不执行也报。。。

显示全部楼层 · 发表于 2008-2-11 19:54:23

10楼的包
ACCESS DENIED
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.php?aid=198950

The folowing error was encountered:

The requested object is INFECTED. The following viruses Trojan-Downloader.Win32.Agent.ibm were found

Please contact your service provider if you feel this is incorrect.

--------------------------------------------------------------------------------

Generated Mon Feb 11 19:53:17 2008 by Kaspersky Anti-Virus 7.0

显示全部楼层 · 发表于 2008-2-12 07:02:48

The file 'a.js' has been determined to be 'MALWARE'. Our analysts named the threat HTML/Iframe.YH. The term "HTML/" denotes a script-virus that is able to infect the system using a HTML script.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-2-12 07:18:00

McAfee Downloader.gen.a

[已鉴定] 假装-该页无法显示的半老不新的网马~

回复 9楼 tanlimo 的帖子

回复 9楼 tanlimo 的帖子

回复 6楼 tanlimo 的帖子

回复 5楼 Graybird 的帖子