生成物

显示全部楼层 · 发表于 2008-4-5 16:04:21

http://bbs.kafan.cn/viewthread.php?tid=229502&extra=page%3D1

可能有的不是，还有几个恶心的图片删了
OSS全漏了

显示全部楼层 · 发表于 2008-4-5 16:06:40

微点

木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX01.297\ENTSVER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX02.782\ENTSVER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX05.860\ENTSVER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX06.485\ENTSVER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-4-5 16:07:08

我想掐死vik

显示全部楼层 · 发表于 2008-4-5 16:08:10

alwil的人在搞什么飞机啊

显示全部楼层 · 发表于 2008-4-5 16:13:42

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\windows'
C:\Documents and Settings\Administrator\My Documents\windows\
  COMMAND.COM
  cosis.ocx
[0] Archive type: Runtime Packed
--> Object
  DOSX.EXE
  EntSver.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.4486
   [NOTE]    The file was deleted!
  GUOCYOKl.BAT
  KB16.COM
  MSCDEXNT.EXE
  mscpx32r.det
  msscript.ocx
  QMDispatch.dll
[0] Archive type: Runtime Packed
--> Object
  REDIR.EXE
  xnnbfib.dll
[0] Archive type: Runtime Packed
--> Object

End of the scan: 2008年4月5日  01:13
Used time: 00:04 min

The scan has been done completely.

   1 Scanning directories
   12 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   11 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-4-5 16:14:48

1043940    COMMAND.COM    49.7 KB    KNOWN CLEAN
1299213    cosis.ocx    225 KB    CLEAN
510856    DOSX.EXE    52.59 KB    KNOWN CLEAN
3809402    GUOCYOKl.BAT    164 Byte    UNDER ANALYSIS
233777    KB16.COM    14.37 KB    KNOWN CLEAN
75012    MSCDEXNT.EXE    817 Byte    KNOWN CLEAN
3809403    mscpx32r.det    2.5 KB    UNDER ANALYSIS
19835    msscript.ocx    100 KB    KNOWN CLEAN
1299214    QMDispatch.dll    27.5 KB    FALSE POSITIVE
90428    REDIR.EXE    3.26 KB    KNOWN CLEAN
3655901    xnnbfib.dll    15.5 KB    FALSE POSITIVE

显示全部楼层 · 发表于 2008-4-5 16:42:46

显示全部楼层 · 发表于 2008-4-5 16:50:42

[Found backdoor] <W32/Hupigon.A.gen!Eldorado (not disinfectable, generic)> C:\test\windows.zip->EntSver.exe->(PE_Patch)

显示全部楼层 · 发表于 2008-4-5 17:22:46

D:\download\windows.zip>>EntSver.exe TrojanPSW.OnLineGames.zow.tilo 木马还未处理

显示全部楼层 · 发表于 2008-4-5 17:49:15

[病毒样本] 生成物

本帖子中包含更多资源

本帖子中包含更多资源