一不明物体

显示全部楼层 · 发表于 2008-9-6 11:25:47

学校机房抓的~~~~~~

显示全部楼层 · 发表于 2008-9-6 11:31:41

d:\工具\样本\sysclient\SYSCLIENT.EXE packed: UPX
ERROR: delete wrong pointer (00000000)
d:\工具\样本\sysclient\SYSCLIENT.EXE infected: Trojan.Win32.Agent.mzi

显示全部楼层 · 发表于 2008-9-6 11:40:24

微点拦截

显示全部楼层 · 发表于 2008-9-6 11:42:21

金山 -

[ 本帖最后由 tvuser2007 于 2008-9-6 11:43 编辑 ]

显示全部楼层 · 发表于 2008-9-6 11:59:55

卡巴

2008-09-06 11:59:19 http://bbs.kafan.cn/attachment.p ... /SYSCLIENT.EXE//UPX 已检测到木马程序 Trojan.Win32.Agent.mzi

显示全部楼层 · 发表于 2008-9-6 13:20:43

Virus or unwanted program 'TR/Agent.als.1 [trojan]'
detected in file 'C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\89ABCDEF\SYSCLIENT[1].rar.
Action performed: Deny access

显示全部楼层 · 发表于 2008-9-6 13:22:42

Begin scan in 'C:\Users\Administrator\Desktop\SYSCLIENT.rar'
C:\Users\Administrator\Desktop\SYSCLIENT.rar
[0] Archive type: RAR
   --> SYSCLIENT\SYSCLIENT.EXE
      --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the TR/Agent.als.1 Trojan
[NOTE]    The file was deleted!

End of the scan: 2008年9月6日  13:22
Used time: 00:07 Minute(s)

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-9-6 13:53:35

很晕啊!下一个试试!

显示全部楼层 · 发表于 2008-9-6 19:18:13

RS20.60.52未杀！

显示全部楼层 · 发表于 2008-9-6 19:43:36

McAfee miss

[病毒样本] 一不明物体

7/0