[病毒样本] 1

显示全部楼层 · 发表于 2008-3-25 16:08:00

红伞不报（汗，忘开高启了），上报。
The file 'Server.exe' has been determined to be 'UNDER ANALYSIS'.

[ 本帖最后由 HC303 于 2008-3-25 16:11 编辑 ]

显示全部楼层 · 发表于 2008-3-25 16:08:48

Begin scan in 'E:\VIRUS\Server2.rar'
E:\VIRUS\Server2.rar
  [0] Archive type: RAR
  --> Server.exe
   [DETECTION] Contains suspicious code HEUR/Malware

显示全部楼层 · 发表于 2008-3-25 16:18:35

卡巴8，没反应。

显示全部楼层 · 发表于 2008-3-25 16:43:53

金山 0

显示全部楼层 · 发表于 2008-3-25 17:02:23

上报到卡巴

显示全部楼层 · 发表于 2008-3-25 17:31:33

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-3-25 17:34:02

启发报

显示全部楼层 · 发表于 2008-3-25 17:51:55

微点来也

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.157\SERVER.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\YINHU.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-3-25 19:01:43

Hello,

Server.exe2 - Trojan-Downloader.Win32.Agent.mao,

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

[病毒样本] 1

本帖子中包含更多资源