astats.d

显示全部楼层 · 发表于 2008-10-3 21:46:19

Q 我要炸弹

显示全部楼层 · 发表于 2008-10-3 21:46:47

W 我要山芋

显示全部楼层 · 发表于 2008-10-3 21:49:59

X 手头什么都没有

显示全部楼层 · 发表于 2008-10-3 21:53:00

SEP MISS

显示全部楼层 · 发表于 2008-10-3 21:53:41

Requested URL: http://bbs.kafan.cn/attachment.p ... c2&t=1223042005
Information: Contains recognition pattern of the DR/Agent.410866 dropper
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.35, VDF 7.0.6.241

显示全部楼层 · 发表于 2008-10-3 21:54:12

C:\Documents and Settings\haha\桌面\astats.rar
[0] Archive type: RAR
   --> astats.exe
      [1] Archive type: RAR SFX (self extracting)
      --> bcp\OperacionesEnLinea\images\new\zona_segura\tit_ingresa.gif
      [DETECTION] Contains recognition pattern of the DR/Agent.410866 dropper
      --> images\tit_ingresa.gif
      [DETECTION] Contains recognition pattern of the DR/Agent.410866 dropper
      --> firewall.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
      --> updater.exe
         [DETECTION] Contains HEUR/Malware suspicious code

显示全部楼层 · 发表于 2008-10-3 23:15:14

2008/10/3 23:14:01 已清除木马程序 Trojan.BAT.Qhost.bb G:\Temp\Virus\astats.rar/astats.exe/peru.bat

显示全部楼层 · 发表于 2008-10-4 12:41:08

C:\Users\IBM\Desktop\astats.rar > RAR > astats.exe > RAR > updater.exe - Win32/TrojanDownloader.VB.NQP 特洛伊木马
C:\Users\IBM\Desktop\astats.rar > RAR > astats.exe > RAR > peru.bat - Win32/Qhost.NFF 特洛伊木马

显示全部楼层 · 发表于 2008-10-4 14:39:12

astats.exe Generic Qhost (特洛伊)

[病毒样本] astats.d

本帖子中包含更多资源