Win32:IstBar-AU [Trj]

显示全部楼层 · 发表于 2008-2-16 17:33:28

http://www.negativebeats.com/ldplugin.exe

显示全部楼层 · 发表于 2008-2-16 17:34:03

F:\virus\mp3_plugin.rar » RAR » mp3_plugin.exe - a variant of Win32/TrojanDownloader.IstBar trojan

显示全部楼层 · 发表于 2008-2-16 17:34:34

mp3_plugin.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\mp3_plugin.rar
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.IstBar.gen (KAV 引擎), Generic.Istbar.144F2774 (BD 引擎)

显示全部楼层 · 发表于 2008-2-16 17:35:09

Begin scan in 'D:\BOOK\mp3_plugin.rar'
D:\BOOK\mp3_plugin.rar
  [0] Archive type: RAR
  --> mp3_plugin.exe
   [DETECTION] Is the Trojan horse TR/Dldr.IstBar.28928.31
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-16 17:35:46

F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-2-16, 4:21

Scan name: [Custom Scan]
Path to scan: F:\virus\mp3_plugin.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-2-16, 17:33:56
---------------------------------------------------------------------

[Found virus] <W32/Istbar.gen10@dl (not disinfectable)> F:\virus\mp3_plugin.rar->mp3_plugin.exe->(UPX)
[Contains infected objects] F:\virus\mp3_plugin.rar
[Quarantined] F:\virus\mp3_plugin.rar->mp3_plugin.exe->(UPX)

---------------------------------------------------------------------
Scan ended: 2008-2-16, 17:33:58
Duration: 0:00:01

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1

显示全部楼层 · 发表于 2008-2-16 17:41:35

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.IstBar.GEN

MAC 地址：00:11:D8:2A:98:47

用户来源：局域网

软件版本：20.31.50

显示全部楼层 · 发表于 2008-2-16 17:42:03

地址收藏了. 有主防的测试下效果吧!

显示全部楼层 · 发表于 2008-2-16 19:38:24

FS结果: 找到 1 恶意软件
Trojan-Downloader.Win32.IstBar.gen (病毒)
D:\Virus\Test\mp3_plugin.exe 操作: 删除

显示全部楼层 · 发表于 2008-2-16 19:40:23

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.IstBar.gen 檔案: C:\Documents and Settings\kato9096\桌面\mp3_plugin.rar/mp3_plugin.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.IstBar.gen 檔案: C:\Documents and Settings\kato9096\桌面\ldplugin.exe//UPX

显示全部楼层 · 发表于 2008-2-16 19:42:17

Threat details:

Web page:
http://ysbweb.com/ist/scripts/ys ... =3&theme_id=mp3

Threat:
a variant of Win32/TrojanDownloader.IstBar trojan

Comment:
Access to the web page was blocked by ESET Smart Security.

[病毒样本] Win32:IstBar-AU [Trj]

本帖子中包含更多资源

浏览过的版块