酷狗挂马-。-

显示全部楼层 · 发表于 2008-5-8 10:02:38

消息有些晚了昨天的现已被修正

Log is generated by FreShow.
[wide]http://et.tymtv.com/pg.htm
[frame]http://et.tymtv.com/wqwq.htm
[frame]http://user.bye88.com/ads.html
[frame]http://user.bye88.com/add.html
[object]http://cj.tcpoff.com/down.exe

Begin scan in 'C:\Documents and Settings\Administrator\桌面\down.exe'
C:\Documents and Settings\Administrator\桌面\down.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-5-8 11:03:59

ESET 没有检查出来。

3083 的病毒特征码

显示全部楼层 · 发表于 2008-5-8 12:18:11

金山 0

显示全部楼层 · 发表于 2008-5-8 16:39:26

norman被过了不过貌似不能运行

显示全部楼层 · 发表于 2008-5-8 18:26:11

kv 0

显示全部楼层 · 发表于 2008-5-8 20:37:20

A-Squared  Found nothing
AntiVir  Found TR/Dldr.Agent.ohm
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found nothing
ClamAV  Found PUA.Packed.UPack
CPsecure  Found nothing
Dr.Web  Found Trojan.DownLoader.origin, Trojan.NtRootKit.1069
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found Trojan-Downloader.Win32.Agent.ohq
Fortinet  Found nothing
Ikarus  Found nothing
Kaspersky Anti-Virus  Found Trojan-Downloader.Win32.Agent.ohq
NOD32  Found nothing
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found Mal/Dloadr-E
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2008-5-8 20:38:05

RS20.43.32未杀！

显示全部楼层 · 发表于 2008-5-8 20:43:01

Begin scan in 'D:\Downloads\Sample\飘\down.rar'
D:\Downloads\Sample\飘\down.rar
  [0] Archive type: RAR
--> down.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
      --> Object
         [4] Archive type: RSRC
         --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.Agent.ohm
   [NOTE]    The file was deleted!

End of the scan: 2008年5月8日  20:42
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

[已鉴定] 酷狗挂马-。-

6/0