累死红伞的毒网

显示全部楼层 · 发表于 2008-2-16 14:36:50

http://www.macdwx.com/news/kejian/kejian.html 红伞不断弹

eq也弹，提示浏览器打开播放器

显示全部楼层 · 发表于 2008-2-16 14:40:22

全被Firefox的NoScript插件挡了

显示全部楼层 · 发表于 2008-2-16 14:43:25

好多。。。我头好晕。。

显示全部楼层 · 发表于 2008-2-16 14:45:39

这个东西
http://iii.chsip.net/down.exe

显示全部楼层 · 发表于 2008-2-16 14:50:43

Begin scan in 'D:\BOOK\down.rar'
D:\BOOK\down.rar
  [0] Archive type: RAR
  --> down.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-16 14:52:00

2008-2-16 14:50:34 Kernel File  'F:\virus\down.rar' was sent to ESET for analysis.

F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-2-16, 4:21

Scan name: [Custom Scan]
Path to scan: F:\virus\down.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-2-16, 14:51:05
---------------------------------------------------------------------

[Found downloader] <W32/Banload.B.gen!Eldorado (not disinfectable, generic)> F:\virus\down.rar->down.exe
[Contains infected objects] F:\virus\down.rar
[Quarantined] F:\virus\down.rar->down.exe

---------------------------------------------------------------------
Scan ended: 2008-2-16, 14:51:09
Duration: 0:00:03

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1

显示全部楼层 · 发表于 2008-2-16 14:52:04

本来我也想用红伞扫。

显示全部楼层 · 发表于 2008-2-16 14:55:09

C:\Documents and Settings\Administrator\桌面\down.rar>>down.exe Trojan.Cap82164.ncqj 木马还未处理

显示全部楼层 · 发表于 2008-2-16 15:08:29

用FS找半天也没找到，看来只有入虎穴的方法了

[ 本帖最后由 tanlimo 于 2008-2-16 15:09 编辑 ]

显示全部楼层 · 发表于 2008-2-16 15:09:26

deleted: Trojan program Trojan-Downloader.Win32.Delf.epw File: C:\Documents and Settings\Owner\×ÀÃæ\down.rar/down.exe//PE_Patch//UPack

[已鉴定] 累死红伞的毒网

回复 4楼 gankeyu 的帖子

回复 4楼 gankeyu 的帖子