1个外挂一个毒，以后在也不下了

显示全部楼层 · 发表于 2008-9-30 17:54:47

可怕呀！

显示全部楼层 · 发表于 2008-9-30 17:59:29

经过分析该文件包含键盘纪录的动作~~

显示全部楼层 · 发表于 2008-9-30 17:59:52

2008-9-30 JAY17:58:49 Detected Riskware not-a-virus:Monitor.Win32.KeyLogger.s Low Exact C:\Documents and Settings\Owner\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardhook.dll
2008-9-30 JAY17:58:49 Detected Riskware not-a-virus:PSWTool.Win32.PassViewer.i Low Exact C:\Documents and Settings\Owner\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardlog.exe/UPX
2008-9-30 JAY17:58:49 Detected Riskware not-a-virus:PSWTool.Win32.PassViewer.j Low Exact C:\Documents and Settings\Owner\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\monitor.exe/UPX
2008-9-30 JAY17:58:49 Detected Riskware not-a-virus:Monitor.Win32.KeyLogger.s Low Exact C:\Documents and Settings\Owner\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardhook.dll
2008-9-30 JAY17:59:09 Detected Riskware not-a-virus:PSWTool.Win32.PassViewer.i Low Exact C:\Documents and Settings\Owner\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardlog.exe/UPX
2008-9-30 JAY17:59:09 Detected Riskware not-a-virus:PSWTool.Win32.PassViewer.j Low Exact C:\Documents and Settings\Owner\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\monitor.exe/UPX

显示全部楼层 · 发表于 2008-9-30 18:45:31

Virus or unwanted program 'SPR/KeyLogger.S.4 [riskware]'
detected in file 'D:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\91BUVWO7\ngnsss_50911[1].rar.
Action performed: Deny access

显示全部楼层 · 发表于 2008-9-30 23:25:44

显示全部楼层 · 发表于 2008-9-30 23:28:48

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YH01KL4N\ngnsss_50911[1].rar\键盘记录器7.1 华军版\keyboardlog.exe - 是风险程序 Program.Keylogger
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YH01KL4N\ngnsss_50911[1].rar\键盘记录器7.1 华军版\monitor.exe - 已感染 Trojan.KeyLogger.1421

压缩包含 2 个被感染的对象

显示全部楼层 · 发表于 2008-10-1 01:29:09

探测到: 风险软件 not-a-virus:Monitor.Win32.KeyLogger.s 网址: http://bbs.kafan.cn/attachment.p ... &t=1222795638//键盘记录器7.1 华军版/keyboardhook.dll

显示全部楼层 · 发表于 2008-10-1 01:32:20

请问楼主这是什么挂

显示全部楼层 · 发表于 2008-10-1 06:54:39

2008-10-1 6:54:58       检测到威胁: not-a-virus:Monitor.Win32.KeyLogger.s       C:\Documents and Settings\Administrator\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardhook.dll
2008-10-1 6:54:58       已删除: not-a-virus:Monitor.Win32.KeyLogger.s       C:\Documents and Settings\Administrator\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardhook.dll
2008-10-1 6:54:58       检测到威胁: not-a-virus:PSWTool.Win32.PassViewer.i       C:\Documents and Settings\Administrator\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardlog.exe/UPX
2008-10-1 6:54:58       已删除: not-a-virus:PSWTool.Win32.PassViewer.i       C:\Documents and Settings\Administrator\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\keyboardlog.exe
2008-10-1 6:54:58       检测到威胁: not-a-virus:PSWTool.Win32.PassViewer.j       C:\Documents and Settings\Administrator\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\monitor.exe/UPX
2008-10-1 6:54:58       已删除: not-a-virus:PSWTool.Win32.PassViewer.j       C:\Documents and Settings\Administrator\桌面\ngnsss_50911.rar/键盘记录器7.1 华军版\monitor.exe

其余无法识别.已上传卡巴分析

[ 本帖最后由 328397663 于 2008-10-1 06:56 编辑 ]

[病毒样本] 1个外挂一个毒，以后在也不下了

本帖子中包含更多资源

本帖子中包含更多资源

回复 7楼 ashe_vaan 的帖子

回复 1楼 chenyilong58 的帖子

浏览过的版块