exchanger

显示全部楼层 · 发表于 2008-8-27 21:31:10

启发不错
[Scanning : C:\Download Files]

C:\Download Files\install.zip<ZIP>:install.exe <- Heur.W32 : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-8-27 21:34:24

to lab

显示全部楼层 · 发表于 2008-8-27 22:47:51

Scan Log
Version of virus signature database: 3392 (20080827)
Date: 2008-8-27 Time: 22:48:20
Scanned disks, folders and files: G:\v\install.zip
G:\v\install.zip » ZIP » install.exe - a variant of Win32/Kryptik.F trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 22:48:23 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2008-8-27 23:27:19

上报AVAST~

显示全部楼层 · 发表于 2008-8-28 10:02:22

NIS2008 继续飘

显示全部楼层 · 发表于 2008-8-28 10:23:49

微点拦截

显示全部楼层 · 发表于 2008-10-27 18:22:44

病毒 2008-10-27 18:22:36 C:\Documents and Settings\Administrator\桌面\install.zip\install.exe Win32.TrojDownloader.Exchanger.si.74752 清除成功

[病毒样本] exchanger

ArcaVir2008

ArcaVir2008, F-Prot 4.4.4,NVC 5.99

本帖子中包含更多资源