帮我看看这两只

显示全部楼层 · 发表于 2008-5-2 16:50:59

bd报的，过卡巴蜘蛛

显示全部楼层 · 发表于 2008-5-2 16:53:09

俩带毒网页指向http://ccc.52gol.com/xx.exe

显示全部楼层 · 发表于 2008-5-2 16:59:52

HTML.....

显示全部楼层 · 发表于 2008-5-2 17:38:55

江民不报毒

显示全部楼层 · 发表于 2008-5-2 18:55:10

原帖由 qianwenxiang 于 2008-5-2 16:53 发表
俩带毒网页指向http://ccc.52gol.com/xx.exe

The following files were created in the system:

#	Filename(s)	File Size	File MD5	Alias
1	%Temp%\dat1.tmp	15,191 bytes	0x32E6B17301E4D9F3571A64F50974BB72	Rootkit.Order [PCTools] Generic.ff [McAfee]
2	%Temp%\dat2.tmp	10,301 bytes	0x47719E94A415C8DF20535CF0C6F3F196	(not available)
3	%System%\dllcache\beep.sys	4,224 bytes	0xDA1F27D85E0D1525F6621372E7B685E9	(not available)
4	[file and pathname of the sample #1]	23,072 bytes	0x4176101F5B7EF74B51CD7E3468A80F87	(not available)

显示全部楼层 · 发表于 2008-5-2 19:34:26

显示全部楼层 · 发表于 2008-5-2 19:36:12

ArcaVir , FP6 not found.

显示全部楼层 · 发表于 2008-5-3 01:09:28

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\14.zip'
C:\Documents and Settings\Administrator\My Documents\
  14.zip
[0] Archive type: ZIP
--> 14[1].htm
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\real.zip'
C:\Documents and Settings\Administrator\My Documents\
  real.zip
[0] Archive type: ZIP
--> real[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Agent.ES
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-3 01:10:20

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\xx.exe'
C:\TDDOWNLOAD\
  xx.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
         [3] Archive type: RSRC
         --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.Agent.nsq
            [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-3 01:57:42

木马名称:Trojan.Win32.Genetik.hpv

程序:
C:\DOCUMENTS AND SETTINGS\LOLITA\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\U1HQBIHG\XX[1].EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] 帮我看看这两只

本帖子中包含更多资源

下载病毒列表呢？

本帖子中包含更多资源

浏览过的版块