c-setup.exe更新

显示全部楼层 · 发表于 2008-6-4 18:15:07

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.484\C-SETUP.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\AD-TMPAASI.EXE
2) C:\WINDOWS\TSOKRE.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-6-4 20:14:10

RS20.47.22未杀！

显示全部楼层 · 发表于 2008-6-4 20:16:48

原帖由 Nblock 于 2008-6-4 09:58 发表
微点拦截后门下了一个东东 “反病毒软件钓鱼？” 流氓要反病毒微点貌似没处理完善
程序:
E:\C-SETUP.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\AC-T ...

RS20.47.22未杀！

显示全部楼层 · 发表于 2008-6-4 20:22:29

McAfee报了

显示全部楼层 · 发表于 2008-6-4 21:22:05

[Found security risk] <W32/Delf.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\c-setup.zip->c-setup.exe->(Aspack)

---------------------------------------------------------------------
Scan ended: 2008-6-4, 21:21:59
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] c-setup.exe更新

5/0

8/0

本帖子中包含更多资源

F-Prot 4.4.4