诺顿用户中毒了。。。

显示全部楼层 · 发表于 2008-5-3 14:26:48

诺顿2008没反应，，

显示全部楼层 · 发表于 2008-5-3 14:28:16

木马名称:Trojan-Downloader.Win32.Agent.sjn

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\ABC.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-5-3 14:35:36

显示全部楼层 · 发表于 2008-5-3 14:38:02

Begin scan in 'E:\VIRUS\abc.rar'
E:\VIRUS\abc.rar
  [0] Archive type: RAR
  --> abc.EXE
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.nsy

显示全部楼层 · 发表于 2008-5-3 14:41:45

Kaspersky
Internet Security 2009
Access denied
The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
255781&k=6df9f651d25dcb700bc6976d9cd6a60
4&t=1209796884

The following error was encountered:

The requested object is INFECTED with the following viruses: Trojan-Downloader.Win32.Agent.nsy

Please contact your service provider if you consider it incorrect.
Generated:
Sat May 03 14:41:44 2008
Kaspersky Internet Security 2009

显示全部楼层 · 发表于 2008-5-3 14:44:30

其实诺顿中毒了没什么稀奇的。最近诺顿太火了

显示全部楼层 · 发表于 2008-5-3 14:44:52

Roboon

显示全部楼层 · 发表于 2008-5-3 14:48:57

额...
ESET飘，我飘我飘我飘飘飘....

显示全部楼层 · 发表于 2008-5-3 14:58:02

好家伙....
00040068 00440068    0 Software
000403D0 004403D0    0 Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
00040448 00440448    0 Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel
000404C0 004404C0    0 d:\program files\microsoft visual studio .net 2003\vc7\atlmfc\include\atlbase.h
00040588 00440588    0 \Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch
000406E8 004406E8    0 d:\program files\microsoft visual studio .net 2003\vc7\atlmfc\include\atlsimpcoll.h
000409A4 004409A4    0 Software\Microsoft\Internet Explorer\Main
00044778 00444778    0 m_hWnd == 0
000460D8 004460D8    0 SOFTWARE\Microsoft\VisualStudio\7.1\Setup\VS
00040940 00440940    0 http://www.kwxf.com
000409D8 004409D8    0 58.215.65.193  kzxf.net
000409F1 004409F1    0 58.215.65.193  www.kzxf.net
00040A20 00440A20    0 \system32\drivers\etc\hosts
00040AB0 00440AB0    0 C:\Program Files\Common Files
00040AFC 00440AFC    0 http://about-bank.cn/
00040B40 00440B40    0 http://live.gglike.cn/install.exe
00040554 00440554    0 C:\Program Files\Internet Explorer
000405E0 004405E0    0 C:\Documents and Settings\
00040600 00440600    0 C:\Program Files\Internet Explorer\iexplore.exe
000406E8 004406E8    0 d:\program files\microsoft visual studio .net 2003\vc7

显示全部楼层 · 发表于 2008-5-3 15:04:28

http://research.sunbelt-software.com/ViewMalware.aspx?id=4289424

[病毒样本] 诺顿用户中毒了。。。

本帖子中包含更多资源

本帖子中包含更多资源