banker*19

显示全部楼层 · 发表于 2008-7-22 22:12:51

伟大的banker....
感谢qianwenxiang帮我下载了个令我吐血的banker....

PW:virus

下载地址:http://www.fs2you.com/files/2ff5e01e-57f8-11dd-94fc-0019d11a795f/

出错...
大家把error.hosting.404.html给去了~

[ 本帖最后由电影结束了于 2008-7-22 22:14 编辑 ]

显示全部楼层 · 发表于 2008-7-22 22:18:56

好大

[ 本帖最后由 wangjay1980 于 2008-7-22 22:25 编辑 ]

显示全部楼层 · 发表于 2008-7-22 22:19:52

显示全部楼层 · 发表于 2008-7-22 22:20:05

放弃

显示全部楼层 · 发表于 2008-7-22 22:23:04

banker都那么大~

显示全部楼层 · 发表于 2008-7-22 22:28:23

Start of the scan: 2008年7月22日  22:24

Starting the file scan:

Begin scan in 'C:\Users\\Desktop\banker'
C:\Users\\Desktop\banker\1170688509.exe
[DETECTION] Is the TR/Spy.Banker.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\5r5lj0k8cc.exe
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\Explorer.xml
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\gbiehdst.dll
[DETECTION] Is the TR/Spy.Banker.772608 Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\gbplib.dll
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\gbppdist.dll
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\imglog.jpg
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\kl.jpg
[DETECTION] Is the TR/Spy.Banker.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\orcamento2.txt
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\orcamento3.txt
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\orcamento4.txt
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\orcamento5.txt
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\orcamento6.txt
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\orkut.jpg
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\process.jpg
[DETECTION] Is the TR/Spy.Banker.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\update(1).exe
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/BHO.fby.1 Trojan
[NOTE]    The file was deleted!
C:\Users\\Desktop\banker\update.exe
[DETECTION] Is the TR/PSW.Agent.kbk Trojan
[NOTE]    The file was deleted!

End of the scan: 2008年7月22日  22:26
Used time: 01:06 Minute(s)

The scan has been done completely.

   1 Scanning directories
   20 Files were scanned
   17 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   17 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   0 Archives were scanned
   0 Warnings
   17 Notes

显示全部楼层 · 发表于 2008-7-22 22:34:42

病毒 2008-07-22  22:40:39 C:\Documents and Settings\Administrator\桌面\banker\orcamento6.txt Win32.Troj.Banker.933888 清除成功
病毒 2008-07-22  22:40:38 C:\Documents and Settings\Administrator\桌面\banker\orcamento5.txt Win32.Troj.Banker.1208320 清除成功
病毒 2008-07-22  22:40:38 C:\Documents and Settings\Administrator\桌面\banker\orcamento4.txt Win32.PSWTroj.Delf.qk.551424 清除成功
病毒 2008-07-22  22:40:38 C:\Documents and Settings\Administrator\桌面\banker\kl.jpg Win32.Troj.Banker.14548992 清除成功
病毒 2008-07-22  22:40:37 C:\Documents and Settings\Administrator\桌面\banker\gbppsv.exe Win32.Hack.Delf.851968 清除成功
病毒 2008-07-22  22:40:36 C:\Documents and Settings\Administrator\桌面\banker\gbppdist.dll Win32.TrojDownloader.Dadobra.119808 清除成功

[ 本帖最后由 tvuser2007 于 2008-7-22 22:41 编辑 ]

显示全部楼层 · 发表于 2008-7-22 22:45:59

C:\test\banker\orcamento6.txt - probably a variant of Win32/Spy.Banbra.YB 木马
C:\test\banker\update(1).exe - Win32/Adware.IeDefender.NGJ 应用程序
C:\test\banker\update.exe - a variant of Win32/Small.OU 木马

显示全部楼层 · 发表于 2008-7-22 22:51:52

Logfile of Spyware Terminator v2.2.3.444 (db:2.007.018.000)
Scan Time: 2008-7-22 22:51:00 length: 1 s
Platform: WXP (5.1.0.2600)
User: Admin
Boot Mode: Normal
Scan type: Fast_Spyware_Scan
Scanned Objects: 22 (Critical:1)
Filter: No System items, No Safe items, No Invalid items

Threat Files
<Trojan.Spy.Banker.Gen> : C:\Test\0807\22\banker\1170688509.exe

[病毒样本] banker*19

本帖子中包含更多资源

mcafee报9只

本帖子中包含更多资源

6

only 3