刚中的Bat病毒，电脑瘫痪，大家看看

显示全部楼层 · 发表于 2008-11-11 19:35:38

额...中了个bat，还配带自动运行...

显示全部楼层 · 发表于 2008-11-11 19:37:46

PE文件来的不是BAT

显示全部楼层 · 发表于 2008-11-11 19:39:16

DOWNLOADER: http://222.215.119.43/infor.asp
[update] url=http://www.baidu.com/hun.exe [file] isfile=1 count=34 url1=http://121.10.108.48/cao/aa1.exe mark1=aa53 url2=http://118.122.178.33/cao/aa2.exe mark2=bb53 url3=http://118.122.178.33/cao/aa3.exe mark3=cc53 url4=http://www.baidu.com/cao/aa4.exe mark4=dd53 url5=http://118.122.178.33/cao/aa5.exe mark5=ee53 url6=http://118.122.178.33/cao/aa6.exe mark6=ff53 url7=http://118.122.178.33/cao/aa7.exe mark7=gg53 url8=http://121.10.108.48/cao/aa8.exe mark8=hh53 url9=http://www.baidu.com/cao/aa9.exe mark9=ii53 url10=http://www.baidu.com/cao/aa10.exe mark10=jj53 url11=http://118.122.178.35/cao/aa11.exe mark11=kk53 url12=http://118.122.178.35/cao/aa12.exe mark12=ll53 url13=http://118.122.178.35/cao/aa13.exe mark13=mm53 url14=http://121.10.108.48/cao/aa14.exe mark14=nn53 url15=http://121.10.108.48/cao/aa15.exe mark15=oo53 url16=http://121.10.108.48/cao/aa16.exe mark16=pp53 url17=http://121.10.108.48/cao/aa17.exe mark17=qq53 url18=http://121.10.108.48/cao/aa18.exe mark18=rr53 url19=http://121.10.108.48/cao/aa19.exe mark19=ss53 url20=http://118.122.178.35/cao/aa20.exe mark20=tt53 url21=http://118.122.178.35/cao/aa21.exe mark21=uu53 url22=http://118.122.178.35/cao/aa22.exe mark22=va53 url23=http://118.122.178.35/cao/aa23.exe mark23=ww53 url24=http://118.122.178.35/cao/aa24.exe mark24=xx53 url25=http://118.122.178.33/cao/aa25.exe mark25=yy53 url26=http://118.122.178.33/cao/aa26.exe mark26=zz53 url27=http://118.122.178.33/cao/aa27.exe mark27=ab53 url28=http://118.122.178.33/cao/aa28.exe mark28=ac53 url29=http://118.122.178.33/cao/aa29.exe mark29=ad53 url30=http://118.122.178.33/cao/aa30.exe mark30=ae53 url31=http://www.baidu.com/cao/aa31.exe mark31=af53 url32=http://www.baidu.com/cao/aa32.exe mark32=ag53 url33=http://118.122.178.35/cao/aa33.exe mark33=ah53 url34=http://118.122.178.35/cao/aa34.exe mark34=ai53

显示全部楼层 · 发表于 2008-11-11 19:42:31

诺顿2009杀了，支持下！

显示全部楼层 · 发表于 2008-11-11 19:47:43

McAfee New Malware.aj

显示全部楼层 · 发表于 2008-11-11 20:01:55

好绿

显示全部楼层 · 发表于 2008-11-11 20:41:59

Begin scan in 'E:\Download\Virus\绿化.rar'
E:\Download\Virus\绿化.rar
[0] Archive type: RAR
--> ￂￌﾻﾯ.bat
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-11-11 20:43:38

[发现可能为病毒：] <W32/Threat-SysVenFakU-based!Maximus (not disinfectable)> C:\Test\绿化.rar->绿化.bat

显示全部楼层 · 发表于 2008-11-11 20:44:05

[病毒样本] 刚中的Bat病毒，电脑瘫痪，大家看看

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4

Norman Virus Control 5.99

本帖子中包含更多资源