[病毒样本] 1x

显示全部楼层 · 发表于 2008-12-6 21:33:43

To KL

显示全部楼层 · 发表于 2008-12-6 21:36:32

'TR/Dropper.Gen' [trojan]

显示全部楼层 · 发表于 2008-12-6 21:40:24

要死我也发了...

我发的是生成物 server.exe

显示全部楼层 · 发表于 2008-12-6 21:42:17

程序:
C:\DOCUMENTS AND SETTINGS\\桌面\KEYCHECKER0.568.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\IXP000.TMP\KEYCHE~1.EXE
2) C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\IXP000.TMP\SERVER.EXE
3) C:\WINDOWS\SYSTEM32\DRIVERS\ETC\1C4OQ8UP.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-12-6 22:22:35

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Limited\桌面\KeyChecker0.568.EXE'
C:\Documents and Settings\Limited\桌面\KeyChecker0.568.EXE
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was deleted!

这东西都有假的了

显示全部楼层 · 发表于 2008-12-6 23:25:32

原帖由 lingbo110120 于 2008-12-6 21:40 发表
要死我也发了...

我发的是生成物 server.exe

JIANGMIN继续认识
\\?\c:\documents and settings\administrator\桌面\keychecker0[1].568\keychecker0.568.exe->server.exe trojan/qhosts.o 2008-12-6 23:23:55 已删除

[ 本帖最后由 leonfg 于 2008-12-6 23:27 编辑 ]

显示全部楼层 · 发表于 2008-12-6 23:37:05

上报诺顿

显示全部楼层 · 发表于 2008-12-7 00:01:51

上报金山

显示全部楼层 · 发表于 2008-12-7 17:41:12

Hello,

KeyChecker0.568.exe_ - Trojan.Win32.CDur.md

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

显示全部楼层 · 发表于 2008-12-7 20:35:08

to Norman

[病毒样本] 1x

本帖子中包含更多资源

浏览过的版块