[病毒样本] 3x

显示全部楼层 · 发表于 2008-12-14 18:32:17

C:\ks\appwinproc.dll - infected with Trojan.Hooker.21146

DRWEB 报一个。

显示全部楼层 · 发表于 2008-12-14 19:48:11

File ID  Filename Size (Byte) Result
25211279  ksx3.rar 28.84 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25211280  appwinproc.dll  3.5 KB  UNDER ANALYSIS
25189644  HBKernel32.sys  14.35 KB  CLEAN
25211272  d1.bin  43.5 KB  UNDER ANALYSIS
-------------------------------------------------------------------------------------------------------
红伞P版（库V7.01.00.229）Pass.

上报。1个干净，另2个等待分析中。

显示全部楼层 · 发表于 2008-12-14 20:28:48

McAfee miss

显示全部楼层 · 发表于 2008-12-16 01:45:38

原帖由 08红伞威点 于 2008-12-14 19:48 发表
File ID  Filename Size (Byte) Result
25211279  ksx3.rar 28.84 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Resu ...

回复：(分析师命名了威胁 TR/Agent.avcj 。加到我们的病毒定义文件 (VDF) 7.01.00.231)

File ID	Filename	Size (Byte)	Result
25211280	appwinproc.dll	3.5 KB	MALWARE
25189644	HBKernel32.sys	14.35 KB	CLEAN
25211272	d1.bin	43.5 KB	CLEAN

Please find a detailed report concerning each individual sample below:

Filename	Result
appwinproc.dll	MALWARE

The file 'appwinproc.dll' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.avcj. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.00.231.

显示全部楼层 · 发表于 2008-12-16 15:29:38

d1.bin, HBKernel32.sys

No malicious code were found in these files.

[ 本帖最后由 328397663 于 2009-1-4 22:50 编辑 ]

显示全部楼层 · 发表于 2008-12-16 19:55:27

显示全部楼层 · 发表于 2008-12-17 10:04:49

avast 1个

[病毒样本] 3x

回复 1楼 gankeyu 的帖子

本帖子中包含更多资源