视频网站带的.exe程序

显示全部楼层 · 发表于 2008-6-20 00:20:42

没名字

显示全部楼层 · 发表于 2008-6-20 00:25:45

EAV667

Scan Log
Version of virus signature database: 3200 (20080619)
Date: 2008-6-20 Time: 1:55:06
Scanned disks, folders and files: C:\Documents and Settings\Owner\桌面\.exe.rar
C:\Documents and Settings\Owner\桌面\.exe.rar » RAR » .exe - a variant of Win32/Inject.NBE trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 1:55:06 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2008-6-20 00:27:06

Begin scan in 'C:\Documents and Settings\Administrator\桌面\.exe.rar[1]'
C:\Documents and Settings\Administrator\桌面\
C:\Documents and Settings\Administrator\桌面\.exe.rar[1]
  [0] Archive type: RAR
--> .exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    A backup was created as '48d288ff.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-20 08:32:09

显示全部楼层 · 发表于 2008-6-20 08:35:14

Kaspersky miss
TO KL

显示全部楼层 · 发表于 2008-6-20 10:57:30

C:\Documents and Settings\Administrator\桌面\.exe.rar > RAR > .exe - Win32/Inject.NBE 特洛伊木马的变种

显示全部楼层 · 发表于 2008-6-20 11:03:43

显示全部楼层 · 发表于 2008-6-20 13:08:06

卡巴现在可杀..
检测到：木马程序 Trojan.Win32.Obfuscated.vaaa URL: http://www.kafan.cn/bbs/attachme ... //PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2008-6-20 13:11:20

已上传卡巴分析

显示全部楼层 · 发表于 2008-6-20 13:29:23

微点砍掉

[病毒样本] 视频网站带的.exe程序

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 1楼 zbmbb 的帖子

本帖子中包含更多资源