[病毒样本] TWO

显示全部楼层 · 发表于 2008-8-3 13:33:32

大家关注那图片文件ad。

显示全部楼层 · 发表于 2008-8-3 13:35:10

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... b1&t=1217741665
Information: Is the TR/Dldr.Agent.WPS.12 Trojan

显示全部楼层 · 发表于 2008-8-3 13:35:40

检测到：木马程序 Exploit.HTML.CodeBaseExec URL: http://bbs.kafan.cn/attachment.p ... 38775//cookiepop.js
检测到：木马程序 Trojan-Downloader.Win32.Agent.wps URL: http://bbs.kafan.cn/attachment.p ... xe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-8-3 14:00:19

ko.exe 清除了,但是ad.jpg没反应捏?

显示全部楼层 · 发表于 2008-8-3 14:01:56

ko.exe Win32:Trojan-gen {Other}

显示全部楼层 · 发表于 2008-8-3 14:14:34

Begin scan in 'C:\Users\TOSHIBA\Downloads\virus'
C:\Users\TOSHIBA\Downloads\virus\ko.exe
[DETECTION] Is the TR/Dldr.Agent.WPS.12 Trojan
[NOTE]    A backup was created as '48c34cc5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年8月3日  14:12
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-8-3 14:15:49

The file 'ad.jpg' has been determined to be 'UNDER ANALYSIS'.

显示全部楼层 · 发表于 2008-8-3 14:18:06

ad.jpg 好像是个hosts

屏蔽木马群的

[ 本帖最后由冷冷于 2008-8-3 14:20 编辑 ]

显示全部楼层 · 发表于 2008-8-3 14:21:35

ko.exe Downloader.gen.a (特洛伊)

显示全部楼层 · 发表于 2008-8-3 15:49:43

病毒 2008-08-03 15:48:55 C:\Documents and Settings\Administrator\桌面\virus(3).rar\ko.exe Win32.TrojDownloader.rk.184320 清除成功