过一大批

小白鼠

过一大批

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.5.30.1	2008.06.05	-
AntiVir	7.8.0.55	2008.06.06	-
Authentium	5.1.0.4	2008.06.06	-
Avast	4.8.1195.0	2008.06.07	-
AVG	7.5.0.516	2008.06.06	-
BitDefender	7.2	2008.06.07	-
CAT-QuickHeal	9.50	2008.06.06	-
ClamAV	0.92.1	2008.06.06	-
DrWeb	4.44.0.09170	2008.06.06	-
eSafe	7.0.15.0	2008.06.05	-
eTrust-Vet	31.6.5855	2008.06.06	-
Ewido	4.0	2008.06.06	-
F-Prot	4.4.4.56	2008.06.06	-
F-Secure	6.70.13260.0	2008.06.06	-
Fortinet	3.14.0.0	2008.06.06	-
GData	2.0.7306.1023	2008.06.07	-
Ikarus	T3.1.1.26.0	2008.06.07	-
Kaspersky	7.0.0.125	2008.06.07	-
McAfee	5312	2008.06.06	-
Microsoft	None	2008.06.07	-
NOD32v2	3165	2008.06.06	-
Norman	5.80.02	2008.06.06	-
Panda	9.0.0.4	2008.06.06	-
Prevx1	V2	2008.06.07	-
Rising	20.47.42.00	2008.06.06	-
Sophos	4.30.0	2008.06.07	-
Sunbelt	3.0.1145.1	2008.06.05	-
Symantec	10	2008.06.07	-
TheHacker	6.2.92.339	2008.06.07	-
VBA32	3.12.6.7	2008.06.06	-
VirusBuster	4.3.26:9	2008.06.06	-
Webwasher-Gateway	6.6.2	2008.06.06	-

附加信息

File size: 1 bytes

MD5...: 93b885adfe0da089cdf634904fd59f71

SHA1..: 5ba93c9db0cff93f52b521d7420e43f6eda2784f

SHA256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

SHA512: b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22 704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

PEiD..: -

PEInfo: -

小白鼠

补上

HC303

东西呢？

HC303

我的伞启发。
When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=282279&k=a13f5562d43a6b7104f6b22c15cc1350&t=1212981588"
a virus or unwanted program 'HEUR/Malware' [heuristic] was found.
Action taken: Ignored
上报。

25040426	beep.sys	15.88 KB	UNDER ANALYSIS
25040427	update.exe	12.72 KB	UNDER ANALYSIS
513929	conime.exe	27 KB	KNOWN CLEAN
260310	ctfmon.exe	15 KB	KNOWN CLEAN
2212099	wuauclt.exe	51.84 KB	KNOWN CLEAN

[ 本帖最后由 HC303 于 2008-6-9 11:22 编辑 ]

Joker

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... cb&t=1212981610
Information:         Contains suspicious code HEUR/Malware

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.55, VDF 7.0.4.158

多引擎没开高启？？

冷冷

小白鼠运行的毒啊
是把那些正常文件替换为病毒

而那个update 作用是把源文件删除

[ 本帖最后由 冷冷 于 2008-6-9 11:25 编辑 ]

ykz1991

File size: 1 bytes
上传的时候出问题了吧

tanlimo

360查到0个

挪威的冬天

金山毒霸 0

palfan

现在越来越觉得KIS 2009好用了