tugas.exe

显示全部楼层 · 发表于 2008-8-30 22:02:30

沉睡在沙盘里面的

显示全部楼层 · 发表于 2008-8-30 22:03:57

RS20.59.52未杀！

显示全部楼层 · 发表于 2008-8-30 22:05:02

Requested URL: http://bbs.kafan.cn/attachment.p ... f3&t=1220105088
Information: Is the TR/Agent.122880.27 Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.92

显示全部楼层 · 发表于 2008-8-30 22:08:17

Symantec SEP11 报并隔离了

显示全部楼层 · 发表于 2008-8-30 22:39:40

Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
347645&k=266c446b4dbca144417baeb63a0283c
0&t=1220107155

发生下列错误：

请求的对象被感染，发现下列病毒 Heur.StartPage

如有疑问，请联系您的技术支持
创建日期：
Sat Aug 30 22:39:20 2008
Kaspersky Lab

显示全部楼层 · 发表于 2008-8-31 00:12:06

ess tugas.rar > RAR > tugas.exe - Win32/VB.AOY 特洛伊木马的变种

显示全部楼层 · 发表于 2008-8-31 00:16:06

Scan Log
Version of virus signature database: 3401 (20080829)
Date: 2008-8-31 Time: 0:16:48
Scanned disks, folders and files: G:\v\tugas.rar
G:\v\tugas.rar » RAR » tugas.exe - a variant of Win32/VB.AOY trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 0:16:48 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2008-8-31 00:36:21

TO KL

显示全部楼层 · 发表于 2008-8-31 00:41:32

程序:
C:\DOCUMENTS AND SETTINGS\***.18F12FE200FB45E\桌面\ANTI-VIRUS LAB\RUN VIRUS LAB\TUGAS.EXE
木马程序生成以下文件:
1) C:\SANDBOX\***\DEFAULTBOX\DRIVE\C\TUGAS.EXE
2) C:\SANDBOX\***\DEFAULTBOX\DRIVE\D\TUGAS.EXE
3) C:\SANDBOX\***\DEFAULTBOX\DRIVE\E\TUGAS.EXE
是否删除木马程序及其衍生物?

C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\Run virus lab\tugas.exe
[DETECTION] Is the TR/Agent.122880.27 Trojan
[NOTE] The file was moved to '4920788c.qua'!

显示全部楼层 · 发表于 2008-8-31 02:57:26

高启发隔离
2008/8/31 2:56:54 已隔离木马程序 Heur.StartPage G:\Temp\Virus\tugas.rar/tugas.exe

[病毒样本] tugas.exe

2/0