BANKER-BXU

显示全部楼层 · 发表于 2008-2-14 14:24:59

[DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen

显示全部楼层 · 发表于 2008-2-14 14:25:37

E:\virus\kb.rar » RAR » kb.exe - probably a variant of Win32/Spy.Bancos.NFM trojan - was a part of the deleted object
E:\virus\kb.rar - probably a variant of Win32/Spy.Bancos.NFM trojan - deleted - quarantined

显示全部楼层 · 发表于 2008-2-14 14:27:17

2008/2/14 14:24:05 Real-time file system protection file G:\v\kb.exe probably a variant of Win32/Spy.Bancos.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-2-14 14:27:45

显示全部楼层 · 发表于 2008-2-14 14:34:31

2008-2-14 14:39:12 Kernel File 'kb.exe' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-14 14:36:41

江民0

显示全部楼层 · 发表于 2008-2-14 14:39:29

已检测到: 木马程序 Trojan-Spy.Win32.Bancos.zm URL: http://bbs.kafan.cn/attachment.php?aid=200486//kb.exe//UPX

显示全部楼层 · 发表于 2008-2-14 14:41:09

金山 miss

生成物杀 1

病毒 2008-02-14 14:38:46 病毒在文件D:\Sandbox\挪威的冬天\VirusTest\drive\C\Windows\system32\AOSMTP.dll中 Win32.Hack.Agent.446464 处理成功（操作：删除）

显示全部楼层 · 发表于 2008-2-14 14:48:24

ewido anti-spyware - Scan Report
---------------------------------------------------------

+ 创建时间: 14:52:40 2008-2-14

+ 扫描结果:

C:\Documents and Settings\zh\桌面\kb.rar/kb.exe -> Logger.Bancos.zm : 未进行操作.

::报告结束

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Spy.Bancos.twc

用户来源：互联网

软件版本：20.31.10

[病毒样本] BANKER-BXU

本帖子中包含更多资源

本帖子中包含更多资源