朋友打开后中毒,中毒后發現有木馬,有病毒,adware,spyware多達千个

显示全部楼层 · 发表于 2008-5-29 00:08:34

The file 'crack.exe3' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Zlob.mnd. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

不用等候已證实是毒

http://www.threatexpert.com/repo ... 87aebc593ff4291cbaf

已上报卡巴

Hello,

crack.exe_ - Trojan-Downloader.Win32.Agent.qzz

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Andrey Ladikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-5-29 00:49 编辑 ]

显示全部楼层 · 发表于 2008-5-29 00:12:06

杀掉
吐槽无力
eset你慢耍。。。

显示全部楼层 · 发表于 2008-5-29 00:15:18

反病毒引擎版本最後更新掃瞄結果
AhnLab-V3 2008.5.29.0 2008.05.28 -
AntiVir 7.8.0.19 2008.05.28 -
Authentium 5.1.0.4 2008.05.28 -
Avast 4.8.1195.0 2008.05.28 -
AVG 7.5.0.516 2008.05.28 -
BitDefender 7.2 2008.05.28 -
CAT-QuickHeal 9.50 2008.05.28 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.05.28 -
DrWeb 4.44.0.09170 2008.05.28 -
eSafe 7.0.15.0 2008.05.27 Suspicious File
eTrust-Vet 31.4.5829 2008.05.28 -
Ewido 4.0 2008.05.28 -
F-Prot 4.4.4.56 2008.05.27 W32/Tibs.M.gen!Eldorado
F-Secure 6.70.13260.0 2008.05.28 -
Fortinet 3.14.0.0 2008.05.28 -
GData 2.0.7306.1023 2008.05.28 -
Ikarus T3.1.1.26.0 2008.05.28 -
Kaspersky 7.0.0.125 2008.05.28 -
McAfee 5305 2008.05.28 -
Microsoft 1.3520 2008.05.28 -
NOD32v2 3140 2008.05.28 -
Norman 5.80.02 2008.05.28 -
Panda 9.0.0.4 2008.05.28 -
Prevx1 V2 2008.05.28 -
Rising 20.46.22.00 2008.05.28 -
Sophos 4.29.0 2008.05.28 Mal/EncPk-CG
Sunbelt 3.0.1123.1 2008.05.17 -
Symantec 10 2008.05.28 -
TheHacker 6.2.92.321 2008.05.27 -
VBA32 3.12.6.6 2008.05.28 -
VirusBuster 4.3.26:9 2008.05.28 -
Webwasher-Gateway 6.6.2 2008.05.28 Win32.Malware.gen (suspicious)
http://www.virustotal.com/zh-tw/ ... 45062cf2a07198cd8a6

显示全部楼层 · 发表于 2008-5-29 00:16:12

质量还算过关

显示全部楼层 · 发表于 2008-5-29 00:25:15

看LZ标题，感觉像是感染型的

显示全部楼层 · 发表于 2008-5-29 00:42:52

看报告沒有連网，但為什么会有这么多个不同种的木馬病毒,spyware,adware

显示全部楼层 · 发表于 2008-5-29 00:45:04

刚测试了下，系统没任何反应。。。

显示全部楼层 · 发表于 2008-5-29 00:46:06

真的搞不清楚他的木馬,病毒,adware,spyware是來自什么地方

显示全部楼层 · 发表于 2008-5-29 00:46:30

hips只在执行crack.exe的时候有提示，也就是说crack运行后就没任何动作了...

显示全部楼层 · 发表于 2008-5-29 00:47:47

也许crack.exe不是那上千个恶意软件的源头吧？或许是利用了系统的某个漏洞，而您的电脑并没有打上相关补丁？

[病毒样本] 朋友打开后中毒,中毒后發現有木馬,有病毒,adware,spyware多達千个

本帖子中包含更多资源

本帖子中包含更多资源

回复 5楼 palfan 的帖子

回复 7楼 vc2136 的帖子