200811日病毒样本一帖，各位来测测看（加多3个包）

显示全部楼层 · 发表于 2008-7-12 12:21:29

病毒 2008-07-12  12:20:48 C:\Documents and Settings\Administrator\桌面\SYSTEM32\SLBIOPFS2.DLL Win32.Troj.AgentT.no.542496 清除成功
病毒 2008-07-12  12:20:47 C:\Documents and Settings\Administrator\桌面\SYSTEM32\NWAPI32DJ.DLL Win32.Troj.AgentT.no.542496 清除成功
病毒 2008-07-12  12:20:47 C:\Documents and Settings\Administrator\桌面\SYSTEM32\KSUSERFY.DLL Win32.Troj.AgentT.aa.889632 清除成功
病毒 2008-07-12  12:20:47 C:\Documents and Settings\Administrator\桌面\SYSTEM32\DISPEXCB.DLL Win32.Troj.AgentT.aa.889632 清除成功
病毒 2008-07-12  12:20:46 C:\Documents and Settings\Administrator\桌面\SYSTEM32\CLICONFGZX.DLL Win32.Troj.AgentT.aa.889632 清除成功
病毒 2008-07-12  12:20:46 C:\Documents and Settings\Administrator\桌面\SYSTEM32\ADSNTZT.DLL Win32.Troj.AgentT.no.542496 清除成功

显示全部楼层 · 发表于 2008-7-12 17:03:48

原帖由 qianwenxiang 于 2008-7-11 23:25 发表
终于把这个破程序改完了玩一下..

5个汗..飘走..继续改

右边的标签怎么竖着

显示全部楼层 · 发表于 2008-7-17 09:12:54

Start of the scan: 2008年7月17日  09:12

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\SYSTEM32.rar'
C:\Documents and Settings\Administrator\桌面\SYSTEM32.rar
  [0] Archive type: RAR
  --> CLICONFGZX.DLL
   [DETECTION] Is the Trojan horse TR/PSW.Lmir.905644
  --> ADSNTZT.DLL
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48d19cce.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\20080711c样本.rar'
C:\Documents and Settings\Administrator\桌面\20080711c样本.rar
  [0] Archive type: RAR
  --> DISPEXCB.DLL
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rycy
  --> KSUSERFY.DLL
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.aqpg.770
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\20080711d样本.rar'
C:\Documents and Settings\Administrator\桌面\20080711d样本.rar
  [0] Archive type: RAR
  --> NWAPI32DJ.DLL
   [DETECTION] Is the Trojan horse TR/PSW.Lmir.1007904.2
  --> SLBIOPFS2.DLL
   [DETECTION] Is the Trojan horse TR/PSW.Lmir.926496.1
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-22 02:51:57

无法识别的.已上传卡巴分析

显示全部楼层 · 发表于 2008-7-22 08:56:50

BD2008 查杀第一个包19个

显示全部楼层 · 发表于 2008-7-22 10:24:16

先用金山侃侃

[病毒样本] 200811日病毒样本一帖，各位来测测看（加多3个包）

后面的~~~6

回复 1楼 molicn 的帖子

回复 1楼 molicn 的帖子