好像是个下载者

显示全部楼层 · 发表于 2009-1-28 20:56:08

'TR/Dropper.Gen' [trojan]

显示全部楼层 · 发表于 2009-1-28 20:57:38

2009/1/28 20:57:26 Document protection file http://bbs.kafan.cn/attachment.p ... 54&t=1233147441 probably a variant of Win32/Genetik trojan deleted (after the next restart) - quarantined Jason-PC\Jason

显示全部楼层 · 发表于 2009-1-28 20:59:09

GR.EXE

显示全部楼层 · 发表于 2009-1-28 20:59:43

D:\download\gr.rar>>gr.exe Trojan.Cap91282.pnem 木马还未处理

显示全部楼层 · 发表于 2009-1-28 21:01:10

木马名称：Trojan-Downloader.Win32.Agent.annf

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\31F60.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\GR.EXE
木马程序生成以下文件：
1) C:\WINDOWS\TASKS\1
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\31F60.DLL
是否删除RootKit程序?

显示全部楼层 · 发表于 2009-1-28 21:01:23

C:\Documents and Settings\Administrator\桌面\新建文件夹\gr.rar > RAR > gr.exe - 可能是 Win32/Genetik 特洛伊木马的变种 - 是已删除对象的一部分

显示全部楼层 · 发表于 2009-1-28 21:04:59

a-squared 4.0.0.29 20090128170451 2009-01-28 Rootkit.Agent!IK 2.343
AntiVir 7.9.0.60 7.1.1.193 2009-01-28 TR/Dropper.Gen 1.890
Authentium 5.1.1 200901271710 2009-01-27 W32/OnlineGames.AJ.gen!Eldorado (Possible) 1.095
AVAST! 3.0.1 090127-0 2009-01-27 - 0.001
AVG 7.5.52.442 270.10.15/1921 2009-01-28 - 1.913
BitDefender 7.81008.2615067 7.23370 2009-01-28 Rootkit.Agent.AIWN 2.495
CA (VET) 9.0.0.143 31.6.6331 2009-01-28 Win32/SillyDl!generic trojan. 6.827
ClamAV 0.94.2 8914 2009-01-28 - 0.102
Comodo 3.0 948 2009-01-27 - 1.557
CP Secure 1.1.0.715 2009.01.28 2009-01-28 Troj.W32.Runner.bh 6.813
Dr.Web 4.44.0.9170 2009.01.28 2009-01-28 MULDROP.Trojan 3.945
F-Prot 4.4.4.56 20090127 2009-01-27 W32/OnlineGames.AJ.gen!Eldorado (generic, not disinfectable) 1.082
F-Secure 5.51.6100 2009.01.28.02 2009-01-28 Trojan-Downloader:W32/Small.HBS [Orion] 0.026
GData 19.2622/19.200 20090128 2009-01-28 Trojan-Dropper.Win32.Agent.afws [Engine:A] 5.400
Ikarus T3.1.01.45 2009.01.28.72222 2009-01-28 Rootkit.Agent 3.548
Microsoft 1.4205 2009.01.28 2009-01-28 TrojanDownloader:Win32/Small.gen!K 5.438
mks_vir 2.01 2009.01.27 2009-01-27 - 2.719
Norman 5.93.01 5.93.00 2009-01-20 W32/Packed_FSG.D 6.675
nProtect 20090128.01 3073269 2009-01-28 - 3.795
Quick Heal 10.00 2009.01.28 2009-01-28 Suspicious - DNAScan 0.878
Sophos 2.82.1 4.37 2009-01-28 Mal/Behav-024 2.663
Sunbelt 4756 4756 2009-01-08 Trojan.Win32.Packed.gen (v) 0.457
The Hacker 6.3.1.5 v00229 2009-01-26 - 0.525
VBA32 3.12.8.11 20090127.0856 2009-01-27 Win32.Trojan.Downloader (http://...) (suspicious) 1.790
ViRobot 20090123 2009.01.23 2009-01-23 - 0.414
VirusBuster 4.5.11.10 10.100.40/784661 2009-01-27 Trojan.DL.Small.AYWE 1.068
卡巴斯基 5.5.10 2009.01.28 2009-01-28 Trojan-Dropper.Win32.Agent.afws 0.066
安博士V3 2009.01.28.02 2009.01.28 2009-01-28 Win-Trojan/Downloader.39305 2.020
安天 2.0.18 20090118.2063925 2009-01-18 - 0.018
江民杀毒 11.0.706 2009.01.28 2009-01-28 - 1.438
熊猫卫士 9.05.01 2009.01.27 2009-01-27 Suspicious file 2.645
瑞星 20.0 21.13.50.00 2009-01-24 - 0.934
赛门铁克 1.3.0.24 20090127.004 2009-01-27 Trojan.Dropper 0.051
趋势科技 8.700-1004 5.802.02 2009-01-28 - 0.108
迈克菲 5.3.00 5508 2009-01-27 - 3.288
金山毒霸 2008.9.8.18 2009.1.28.18 2009-01-28 Win32.Troj.DropRootKit.a.155648 0.646
飞塔 2.81-3.117 9.974 2009-01-28 PossibleThreat 0.183

显示全部楼层 · 发表于 2009-1-28 21:06:42

Kill the DownLoader

显示全部楼层 · 发表于 2009-1-28 23:59:41

晓月红伞解压不杀，扫描后才杀。。。。

[病毒样本] 好像是个下载者

本帖子中包含更多资源