Exchanger

显示全部楼层 · 发表于 2008-8-30 00:18:04

这两天找到的exchanger样本接近1000只了，晕

显示全部楼层 · 发表于 2008-8-30 00:21:45

Requested URL: http://bbs.kafan.cn/attachment.p ... 23&t=1220026890
Information: Is the TR/Dldr.Exchanger.AB Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.89

显示全部楼层 · 发表于 2008-8-30 00:22:23

The file 'G:\video99.zip'
contained a virus or unwanted program 'TR/Dldr.Exchanger.AB' [trojan]
Action(s) taken:The file was deleted!

显示全部楼层 · 发表于 2008-8-30 00:25:04

質量有點兒那個...
AhnLab-V3 2008.8.29.0 2008.08.29 -

AntiVir 7.8.1.23 2008.08.29 TR/Dldr.Exchanger.AB
Authentium 5.1.0.4 2008.08.29 W32/Downldr2.DIJJ
Avast 4.8.1195.0 2008.08.29 Win32:Trojan-gen {Other}
AVG 8.0.0.161 2008.08.29 Win32/Heur
BitDefender 7.2 2008.08.29 Trojan.Downloader.Exchanger.AK
CAT-QuickHeal 9.50 2008.08.29 (Suspicious) - DNAScan
ClamAV 0.93.1 2008.08.29 -
DrWeb 4.44.0.09170 2008.08.29 Trojan.DownLoad.3252
eSafe 7.0.17.0 2008.08.28 Suspicious File
eTrust-Vet 31.6.6056 2008.08.29 -
Ewido 4.0 2008.08.29 -
F-Prot 4.4.4.56 2008.08.29 W32/Downldr2.DIJJ
F-Secure 7.60.13501.0 2008.08.29 Backdoor.Win32.Agent.qgc
Fortinet 3.14.0.0 2008.08.29 W32/Tibs.PACKED!tr
GData 19 2008.08.29 Backdoor.Win32.Agent.qgc
Ikarus T3.1.1.34.0 2008.08.29 Trojan.Crypt.XPACK.EroticPics
K7AntiVirus 7.10.432 2008.08.29 -
Kaspersky 7.0.0.125 2008.08.29 Backdoor.Win32.Agent.qgc
McAfee 5372 2008.08.28 Tibs-Packed
Microsoft 1.3807 2008.08.25 -
NOD32v2 3399 2008.08.29 Win32/Agent.ETH
Norman 5.80.02 2008.08.29 W32/Tibs.CUWV
Panda 9.0.0.4 2008.08.29 -
PCTools 4.4.2.0 2008.08.29 -
Prevx1 V2 2008.08.29 Malware Dropper
Rising 20.59.41.00 2008.08.29 Trojan.Win32.Undef.lkf
Sophos 4.33.0 2008.08.29 Mal/EncPk-DA
Sunbelt 3.1.1592.1 2008.08.29 -
Symantec 10 2008.08.29 Trojan.Erotpics
TheHacker 6.3.0.6.064 2008.08.27 -
TrendMicro 8.700.0.1004 2008.08.29 TROJ_CRYPT.CX
VBA32 3.12.8.4 2008.08.29 suspected of Malware-Cryptor.Win32.General.3
ViRobot 2008.8.29.1355 2008.08.29 Backdoor.Win32.Agent.74752
VirusBuster 4.5.11.0 2008.08.29 Trojan.DL.Exchanger.DS
Webwasher-Gateway 6.6.2 2008.08.29 Trojan.Dldr.Exchanger.AB

显示全部楼层 · 发表于 2008-8-30 01:52:39

2008/8/30 1:52:15 已清除木马程序 Backdoor.Win32.Agent.qgc G:\Temp\video99.zip/video99.exe

显示全部楼层 · 发表于 2008-8-30 07:41:59

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... 4b&t=1220053295
Information: Is the TR/Dldr.Exchanger.AB Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.92

显示全部楼层 · 发表于 2008-8-30 07:53:58

C:\Documents and Settings\Administrator\桌面\video99.zip>>video99.exe Backdoor.Agent.qgc.pmak 后门还未处理

显示全部楼层 · 发表于 2008-8-30 08:29:57

1/1
瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Undef.lkf

MAC 地址：00:16:EC:94:B3:D2

用户来源：局域网

软件版本：20.59.42

显示全部楼层 · 发表于 2008-8-30 08:38:26

[Scanning : C:\Download Files]

C:\Download Files\video99.zip<ZIP>:video99.exe <- Trojan.Agent.Qgc : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-8-30 08:39:27

<W32/Downldr2.DIJJ (确切, not disinfectable)> C:\Download Files\video99.zip->video99.exe

[病毒样本] Exchanger

ArcaVir2008

F-Prot 4.4.4

浏览过的版块