一只鸟下载者

iovejieba

难道是我点背？
不太可能才对
呵呵

Tynox

过红伞了.

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.8.5.0	2008.08.04	-
AntiVir	7.8.1.15	2008.08.04	-
Authentium	5.1.0.4	2008.08.04	-
Avast	4.8.1195.0	2008.08.04	Win32:Mobler-G
AVG	8.0.0.156	2008.08.04	-
BitDefender	7.2	2008.08.05	-
CAT-QuickHeal	9.50	2008.08.04	-
ClamAV	0.93.1	2008.08.05	-
DrWeb	4.44.0.09170	2008.08.04	-
eSafe	7.0.17.0	2008.08.05	-
eTrust-Vet	31.6.6009	2008.08.05	-
Ewido	4.0	2008.08.04	-
F-Prot	4.4.4.56	2008.08.04	-
F-Secure	7.60.13501.0	2008.08.05	-
Fortinet	3.14.0.0	2008.08.04	W32/StartP.A
GData	2.0.7306.1023	2008.08.04	Win32:Mobler-G
Ikarus	T3.1.1.34.0	2008.08.05	Virus.Win32.VB.bb
K7AntiVirus	7.10.403	2008.08.04	-
Kaspersky	7.0.0.125	2008.08.05	-
McAfee	5353	2008.08.04	New Malware.d
Microsoft	1.3807	2008.08.05	-
NOD32v2	3326	2008.08.05	-
Norman	5.80.02	2008.08.04	-
Panda	9.0.0.4	2008.08.04	-
PCTools	4.4.2.0	2008.08.04	-
Prevx1	V2	2008.08.05	-
Rising	20.56.02.00	2008.08.04	-
Sophos	4.31.0	2008.08.05	Mal/StartP-A
Sunbelt	3.1.1537.1	2008.08.01	-
Symantec	10	2008.08.05	-
TheHacker	6.2.96.393	2008.08.04	-
TrendMicro	8.700.0.1004	2008.08.04	Possible_Otorun8
VBA32	3.12.8.2	2008.08.04	-
ViRobot	2008.8.4.1322	2008.08.04	-
VirusBuster	4.5.11.0	2008.08.04	-
Webwasher-Gateway	6.6.2	2008.08.04	-
附加信息
File size: 13605 bytes
MD5...: 5f397cc3036639ff797d5c62cacd9559
SHA1..: e2cd6d05dcc73285a03d0b7cc18609c9f86c2bb7
SHA256: a71bc4672642f99baee4f0ec7a14e5460e1f5305dfac9c35103e69d95a6f652a
SHA512:d04f7b48ab9a7d3f86e57ae74d114046585674fbc506fccfcd6bde5944da0d10<br>eadc787cf83743c17a2ef59bfda1fc47579a8db94a15e98a53fe5de0f0ddeaa5
PEiD..: -
PEInfo: -

[ 本帖最后由 Tynox 于 2008-8-5 11:17 编辑 ]

sltgr

Kaspersky
Internet Security 2009
Access denied
The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
326405&k=13efbb956e276da2ab49b2b19b4c518
9&t=1217929571

The following error was encountered:

The requested object is INFECTED with the following viruses: Trojan.Win32.VB.efj


Please contact your service provider if you consider it incorrect.
Generated:
Tue Aug 05 17:46:07 2008
Kaspersky Internet Security 2009

qigang

RS20.56.11未杀！

tgzw1680

沙盘跟出来就是在非系统盘生成sos1645.exe，然后主要危害是修改ie开始页面为www.cnxhack.com，然后屏蔽任务管理器和注册表。外加注册表加一个自启动。没其他危害。。。。。。。

Nerazzurri

Win32:Mobler-G [Wrm]