修改一段代码过卡巴斯基扫描

显示全部楼层 · 发表于 2008-6-4 13:57:24

2.rar
[0] Archive type: RAR
--> 2.exe
[DETECTION] Contains suspicious code HEUR/Crypted
[NOTE] The file was moved to '48b82ee2.qua'!

显示全部楼层 · 发表于 2008-6-4 14:10:29

都在报壳

显示全部楼层 · 发表于 2008-6-4 14:26:32

那啥…… 微软的报发：Trojan:Win32/Vundo.GX ……！！！@

显示全部楼层 · 发表于 2008-6-4 16:06:25

to kl

显示全部楼层 · 发表于 2008-6-4 20:12:35

Hello,

2.exe_ - Backdoor.Win32.Small.dzm

This file is already detected. Please update your antivirus bases.

显示全部楼层 · 发表于 2008-6-4 20:21:01

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.Agent.g

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.22

显示全部楼层 · 发表于 2008-6-4 20:40:22

McAfee MISS

显示全部楼层 · 发表于 2008-6-4 20:43:51

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\2.rar<RAR>:2.exe <- Heur.W32 : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-6-4 20:44:11

[Found security risk] <W32/Virtumonde.T.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\2.rar->2.exe

---------------------------------------------------------------------
Scan ended: 2008-6-4, 20:44:02
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-5 09:52:31

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... 6c&t=1212630730
Information: Is the Trojan horse TR/DNSChanger.agr

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.51, VDF 7.0.4.143

[病毒样本] 修改一段代码过卡巴斯基扫描

2/1

ArcaVir2008

F-Prot 4.4.4