某大马所下载的

显示全部楼层 · 发表于 2009-1-8 00:07:06

Start of the scan: 2009年1月8日  00:05
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\新建_WinRAR_压缩文件.rar'
C:\Documents and Settings\***\桌面\新建_WinRAR_压缩文件.rar
[0] Archive type: RAR
   --> moumou.txt
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    A backup was created as '49c431cc.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年1月8日  00:05
Used time: 00:04 Minute(s)

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes
------------------------------------------------------红伞入库杀。（库V7.01.01.79）

显示全部楼层 · 发表于 2009-1-8 00:24:04

原帖由 taoyuan237 于 2009-1-7 14:20 发表
dl.360safe.com???怎么是这个网站。这不是360以前的域名吗？？

真奇怪

显示全部楼层 · 发表于 2009-1-8 01:34:36

显示全部楼层 · 发表于 2009-1-8 03:03:48

显示全部楼层 · 发表于 2009-1-8 11:51:46

symantec 查杀

显示全部楼层 · 发表于 2009-1-8 12:29:48

附件那个是下载者，很容易杀的。。。
这些才是大马
hxxp://dl.360safe.com/safebox.cab
hxxp://dl.360safe.com/listblacko.cab
hxxp://dl.360safe.com/listpredef1.cab
hxxp://dl.360safe.com/360.cab
hxxp://dl.360safe.com/safeext.cab
hxxp://dl.360safe.com/box.cab
hxxp://dl.360safe.com/libspywa.cab
hxxp://dl.360safe.com/libspyerp.cab
hxxp://dl.360safe.com/libleak.cab
hxxp://dl.360safe.com/libleak2.cab
hxxp://dl.360safe.com/libleak2.cab

模仿360超像的。。。

显示全部楼层 · 发表于 2009-1-8 13:08:45

很像。。。。

显示全部楼层 · 发表于 2009-1-8 13:10:55

这是360吧，解压后运行

显示全部楼层 · 发表于 2009-1-8 13:37:04

不知道哦！很多人说是360

但是我运行的时候小A狂报！今天这病毒竟然测试不了
那个马竟然换了下载地址了。。。。
http://txt.bm-740.com/oo.txt

[ 本帖最后由 dearhaoji 于 2009-1-8 13:41 编辑 ]

[病毒样本] 某大马所下载的

本帖子中包含更多资源

回复 6楼 jiajia19881018 的帖子

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源