setup.exe [md5:7bafa9]

显示全部楼层 · 发表于 2008-5-24 18:53:27

setup.rar 11.90/11.90KB 100.00% 在线扫描它是一个“木马” 2008-5-24 18:53:15 2008-5-24 18:53:30

显示全部楼层 · 发表于 2008-5-24 19:13:59

程序:
E:\SETUP.EXE
木马程序生成以下文件:
1) C:LOCAL SETTINGS\TEMP\TEMPORARY INTERNET FILES\CONTENT.IE5\V79JVDGW\1014[1].EXE
2) C:LOCAL SETTINGS\TEMP\KMQ0.EXE
3) C:\WINDOWS\SYSTEM32\KDHKS.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-5-24 19:52:47

McAfee MISS

显示全部楼层 · 发表于 2008-5-24 19:53:45

MISS . to it

显示全部楼层 · 发表于 2008-5-24 19:54:33

[Found security risk] <W32/Zlob.S!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\setup.rar->setup.exe

---------------------------------------------------------------------
Scan ended: 2008-5-24, 19:53:29
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] setup.exe [md5:7bafa9]

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4