install_player.exe

显示全部楼层 · 发表于 2008-6-28 12:19:24

http://www.threatexpert.com/repo ... a285d00a7dec37ff6fb

显示全部楼层 · 发表于 2008-6-28 13:31:28

kav 0

显示全部楼层 · 发表于 2008-6-28 16:16:47

程序:
C:\DOCUMENTS AND SETTINGS\KAFAN\桌面\INSTALL_PLAYER.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\XMLVIEW.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-6-28 16:37:00

红伞没反应

显示全部楼层 · 发表于 2008-6-28 20:08:34

RS20.50.52未杀！

显示全部楼层 · 发表于 2008-6-28 20:55:26

install_player[1].zip 为 Win32/Burgspill!generic trojan。

显示全部楼层 · 发表于 2008-6-28 20:56:47

[Found possible virus] <W32/Adware-RegBHO-based.1!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\install_player.zip->install_player.exe->rsrcPE

---------------------------------------------------------------------
Scan ended: 2008-6-28, 20:56:32
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-28 20:57:14

MISS

显示全部楼层 · 发表于 2008-6-28 21:00:17

原帖由 tvuser2007 于 2008-6-28 13:31 发表
kav 0

kav报了的啊

显示全部楼层 · 发表于 2008-7-1 08:59:32

Scan Log
Version of virus signature database: 3229 (20080630)
Date: 2008-7-1 Time: 8:59:45
Scanned disks, folders and files: G:\v\install_player.zip
G:\v\install_player.zip » ZIP » install_player.exe - Win32/Adware.IeDefender.NFX application - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 8:59:45 Total scanning time: 0 sec (00:00:00)

[病毒样本] install_player.exe

4/0

ca

F-Prot 4.4.4

ArcaVir2008