KernelBot 更新x2

显示全部楼层 · 发表于 2008-4-24 18:21:21

EAV
D:\病毒样本\kernel.rar > RAR > hexinddos.exe - Win32/NetGuy 特洛伊木马的变种

显示全部楼层 · 发表于 2008-4-24 18:22:59

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\kernel.rar'
E:\新建文件夹 (2)\kernel.rar
  [0] Archive type: RAR
  --> erwe.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> hexinddos.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Root.258048
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-24 18:27:48

24:04:2008 18:25:18 SEARCHTASK "USER_DEFINED" started...
scan item: E:\VIRUS\kernel
Directory scanned(filestreams): E:\VIRUS\kernel
File scanned: E:\VIRUS\kernel\erwe.exe
File scanned: E:\VIRUS\kernel\hexinddos.exe - SIGNATURE FOUND "Virus.Win32.Visel.E"
24:04:2008 18:25:19 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 2
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2008-4-24 18:35:16

赛门铁克不报

显示全部楼层 · 发表于 2008-4-24 19:20:19

金山 0

显示全部楼层 · 发表于 2008-4-24 19:28:43

D:\download\kernel.rar>>erwe.exe Backdoor.Huigezi.qqm.xzbr 后门还未处理

显示全部楼层 · 发表于 2008-4-24 19:40:56

玩玩卡巴主防微点拦截成功修改beep.sys 还一个未知间谍

显示全部楼层 · 发表于 2008-4-24 19:41:22

McAfee found nothing

显示全部楼层 · 发表于 2008-4-24 19:58:25

在 C:\Documents and Settings\Administrator\桌面\kernel.rar->erwe.exe 中发现 Backdoor/Huigezi.qqm 病毒, 已删除

[病毒样本] KernelBot 更新x2

本帖子中包含更多资源

IK

本帖子中包含更多资源