[病毒样本] 1

显示全部楼层 · 发表于 2008-4-13 21:27:46

卡巴：
Win32.Agent.mwy

http://www.threatexpert.com/repo ... 7272c34b2b1f3304406

[ 本帖最后由 kato9096 于 2008-4-13 21:33 编辑 ]

显示全部楼层 · 发表于 2008-4-13 21:31:35

McAfee MISS

显示全部楼层 · 发表于 2008-4-13 21:34:06

[Found possible virus] <W32/Veil-MSMU-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\sysloader.rar->sysloader.dll->(PE_Patch)->(Aspack)->(Aspack)

显示全部楼层 · 发表于 2008-4-13 21:39:36

File scanned: C:\Documents and Settings\Administrator\桌面\sysloader.rar - SIGNATURE FOUND "Trojan.Crypt.FKM"

显示全部楼层 · 发表于 2008-4-13 21:40:45

信息 2008-04-13  21:40:39 您此次查毒共查出1个病毒以及危险代码
信息 2008-04-13  21:40:39 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个
信息 2008-04-13  21:40:39 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-13  21:40:39 D:\Desktop\sysloader.rar\sysloader.dll Win32.Troj.YsmarT.ea.183808 清除成功

显示全部楼层 · 发表于 2008-4-13 21:52:15

rising20.39.62未杀！

显示全部楼层 · 发表于 2008-4-13 22:10:09

驱逐舰不杀

显示全部楼层 · 发表于 2008-4-13 22:35:20

Access to the data has been denied!

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: bbs.kafan.cn/attachment.php?aid=240055
Information: Is the Trojan horse TR/Crypt.FKM.Gen
Generated by AntiVir WebGuard 7.01.00.13, AVE 7.6.0.85, VDF 7.0.3.158

显示全部楼层 · 发表于 2008-4-13 22:36:33

2008-4-13,22:35:14 [WARNING] Is the Trojan horse TR/Crypt.FKM.Gen!
  C:\Documents and Settings\Administrator\Local Settings\Temp\2tpuvt68.rar
  Archive: RAR : sysloader.dll
   [INFO] The file will be moved to quarantine.
2008-4-13,22:35:14 [WARNING] Is the Trojan horse TR/Crypt.FKM.Gen!
  C:\Documents and Settings\Administrator\Application Data\Orca Browser\Profiles\Cache\E84F928Bd01
  Archive: RAR : sysloader.dll
   [INFO] The file will be deleted.

显示全部楼层 · 发表于 2008-4-14 00:43:31

卡巴

已删除：木马程序 Trojan-Downloader.Win32.Agent.mwy

文件　: C:\Documents and Settings\Administrator\桌面\sysloader.dll

[病毒样本] 1

本帖子中包含更多资源

3/0