小牛远控1.1－暗组特约版

显示全部楼层 · 发表于 2008-11-7 12:01:02

样本：http://good.gd/38395.htm

[ 本帖最后由 Nblock 于 2008-11-7 12:06 编辑 ]

显示全部楼层 · 发表于 2008-11-7 12:21:30

显示全部楼层 · 发表于 2008-11-7 12:29:45

显示全部楼层 · 发表于 2008-11-7 16:20:25

Reported Attack Site!













This web site at ftp.union.sandai.net has been reported as an attack site and has been blocked based on your security preferences.









Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

显示全部楼层 · 发表于 2008-11-7 17:32:18

鸽子吧

显示全部楼层 · 发表于 2008-11-7 18:04:04

C:\Documents and Settings\Administrator\桌面\[.小牛远控1.1－暗组特约版Good.gd.rar > RAR > 小牛远控1.1－暗组特约版\小牛远控1.1－暗组特约版.EXE > CAB > 小牛远~1.EXE - 可能是 Win32/KillAV 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\[.小牛远控1.1－暗组特约版Good.gd.rar > RAR > 小牛远控1.1－暗组特约版\小牛远控1.1－暗组特约版.EXE > CAB > SERVER~1.EXE - Win32/Hupigon 特洛伊木马

显示全部楼层 · 发表于 2008-11-7 19:09:21

Begin scan in 'E:\Download\Virus\[.小牛远控1.1－暗组特约版Good.gd.rar'
E:\Download\Virus\[.小牛远控1.1－暗组特约版Good.gd.rar
[0] Archive type: RAR
--> ￐ﾡￅﾣￔﾶ﾿￘1.1ﾣﾭﾰﾵￗ￩ￌ￘ￔﾼﾰ￦\￐ﾡￅﾣￔﾶ﾿￘1.1ﾣﾭﾰﾵￗ￩ￌ￘ￔﾼﾰ￦.EXE
[DETECTION] Contains recognition pattern of the DR/Hupigon.dsx.54 dropper
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2008-11-7 21:00:27

McAfee miss

显示全部楼层 · 发表于 2008-11-9 22:11:46

为什么是小牛远控

显示全部楼层 · 发表于 2008-11-10 10:33:47

不明白``

[病毒样本] 小牛远控1.1－暗组特约版

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源