ServerG.exe

显示全部楼层 · 发表于 2008-6-27 23:49:47

费尔报后门

显示全部楼层 · 发表于 2008-6-27 23:49:52

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... b3&t=1214581778
Information: Contains a detection pattern of the (dangerous) backdoor program BDS/Blogfa.3 Backdoor server programs

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.59, VDF 7.0.5.17

显示全部楼层 · 发表于 2008-6-27 23:53:32

2008-6-27 JAY23:47:51 ServerG.Exe Process exit C:\Documents and Settings\Owner\桌面\ServerG.Exe
2008-6-27 JAY23:47:45 ServerG.Exe Denied: KLSystemData/KLStartupRegKeys/Main_Run Modification hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2008-6-27 JAY23:47:45 ServerG.Exe Denied: KLSystemData/KLSystemSecRegKeys/Policies_System Modification hkey_users\S-1-5-21-1292428093-706699826-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Policies\System
2008-6-27 JAY23:47:45 ServerG.Exe Denied: KLSystemData/KLSystemSecRegKeys/Policies_System Modification hkey_users\S-1-5-21-1292428093-706699826-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Policies\System
2008-6-27 JAY23:47:45 ServerG.Exe Denied: KLSystemData/KLSystemSecRegKeys/Policies_System Modification hkey_users\S-1-5-21-1292428093-706699826-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Policies\System
2008-6-27 JAY23:47:45 ServerG.Exe Denied: KLSystemData/KLSystemSecRegKeys/Policies_System Modification hkey_users\S-1-5-21-1292428093-706699826-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Policies\System
2008-6-27 JAY23:47:44 ServerG.Exe Denied: KLSystemData/KLSystemFiles/SystemExe Modification C:\WINDOWS\ServerG.exe
2008-6-27 JAY23:47:44 ServerG.Exe Create C:\WINDOWS\ServerG.exe
2008-6-27 JAY23:47:44 ServerG.Exe : KLSystemData/FD-C/ Create C:\WINDOWS\ServerG.exe
2008-6-27 JAY23:47:44 ServerG.Exe : KLSystemData/KLSystemFiles/SystemExe Create C:\WINDOWS\ServerG.exe
2008-6-27 JAY23:47:44 ServerG.Exe Process start C:\Documents and Settings\Owner\桌面\ServerG.Exe
2008-6-27 JAY23:47:44 ServerG.Exe Placed in group Low Restricted
2008-6-27 JAY23:47:41 WinRAR.exe Create C:\Documents and Settings\Owner\桌面\ServerG.Exe

显示全部楼层 · 发表于 2008-6-27 23:53:58

avk 2008 和微点均无反应

显示全部楼层 · 发表于 2008-6-27 23:54:28

红伞的结果

显示全部楼层 · 发表于 2008-6-27 23:58:42

D:\病毒测试\临时解压\ServerG.zip:\ServerG.Exe - 特征码 'Backdoor.Blogfa.3' 被发现
D:\病毒测试\临时解压\ServerG.zip

2 文件被扫描
(1 压缩档 1 文件)
1 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.121

显示全部楼层 · 发表于 2008-6-27 23:59:20

sophos

显示全部楼层 · 发表于 2008-6-28 00:03:03

显示全部楼层 · 发表于 2008-6-28 08:54:08

kav 0

[病毒样本] ServerG.exe

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源