KB958644.exe

显示全部楼层 · 发表于 2008-11-16 10:34:38

已删除：木马程序 Trojan.Win32.Agent.amxu 文件: C:\Documents and Settings\Administrator\桌面\KB958644\KB958644.EXE//UPack

显示全部楼层 · 发表于 2008-11-16 10:35:03

木马名称:Trojan-Dropper.Win32.Agent.txl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\KB958644\KB958644.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-11-16 10:38:38

Resolved Threats:
Trojan.Dropper
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
Status: Fully Resolved
-----------
1 File
d:\virus\kb958644.rar - Deleted

显示全部楼层 · 发表于 2008-11-16 11:12:46

显示全部楼层 · 发表于 2008-11-16 11:48:36

2008-11-16 11:48:25 启动任务启发式分析计算的威胁级别值较高
2008-11-16 11:48:26 检测到: Trojan.Win32.Agent.amxu C:\Documents and Settings\Administrator\桌面\KB958644.rar/KB958644.EXE/UPack 启发式分析计算的威胁级别值较高
2008-11-16 11:48:26 未处理: Trojan.Win32.Agent.amxu C:\Documents and Settings\Administrator\桌面\KB958644.rar/KB958644.EXE/UPack 延期
2008-11-16 11:48:26 完成任务启发式分析计算的威胁级别值较高

显示全部楼层 · 发表于 2008-11-16 12:21:18

Start of the scan: 2008年11月16日  12:20

Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\KB958644.rar'
C:\Documents and Settings\***\桌面\KB958644.rar
[0] Archive type: RAR
--> KB958644.EXE
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '49589fd6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-11-16 12:45:34

江民杀毒软件拦截了啊

显示全部楼层 · 发表于 2008-11-16 13:02:46

扫描类型: 扫描指定目标
目标: C:\KB958644.rar

--------------------------------------------------------------------------------

结果: 发现 1 个恶意软件
Trojan.Win32.Agent.amxu (病毒)
C:\KB958644.rar\KB958644.EXE

显示全部楼层 · 发表于 2008-11-16 13:08:40

nod32

K:\KB958644.rar > RAR > KB958644.EXE - 未查明的 NewHeur_PE 病毒
K:\KB958644.rar:Zone.Identifier - 正常

[病毒样本] KB958644.exe

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块