视频图标exe （09.03.06 更新 360 个）

显示全部楼层 · 发表于 2009-2-10 14:13:18

蜘蛛：C:\Documents and Settings\牛年发财\桌面\1.exe - 已感染 Trojan.DownLoad.26801 *2

显示全部楼层 · 发表于 2009-2-10 14:17:54

to VB

显示全部楼层 · 发表于 2009-2-10 14:21:17

Begin scan in 'C:\Users\LeiLei\Desktop\2x.rar'
C:\Users\LeiLei\Desktop\2x.rar
[0] Archive type: RAR
--> 1.exe
   [DETECTION] Is the TR/Agent.BABW Trojan
--> 2.exe
   [DETECTION] Is the TR/Agent.BABW Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-10 15:01:50

windows denfender好强大

显示全部楼层 · 发表于 2009-2-10 15:26:12

DR.WEB

1.exe - infected with Trojan.DownLoad.26801
2.exe - infected with Trojan.DownLoad.26801

显示全部楼层 · 发表于 2009-2-10 15:54:59

瑞星 Trojan.DL.Win32.Mnless.cdk

显示全部楼层 · 发表于 2009-2-10 18:13:02

运行样本后

释放WINDOWS.txt、a.exe到%systemroot%\system

WINDOWS.txt的内容如下：

http://www.woxiaohei.cn/down/2.1hao.exe
http://www.woxiaohei.cn/down/5hao.exe
http://www.woxiaohei.cn/down/1hao.exe
http://www.woxiaohei.cn/down/2hao.exe
http://www.woxiaohei.cn/down/gezi.exe
http://www.woxiaohei.cn/down/abc.exe

复制代码

与HXXP://WWW.A88B88.COM/DOWN/LIST.TXT的内容相同

[ 本帖最后由 smallyou93 于 2009-2-10 18:16 编辑 ]

显示全部楼层 · 发表于 2009-2-11 10:59:28

原帖由 sam.to 于 2009-2-10 11:45 发表
to kl

Scanned file: 7.rar - Infected
7.rar/2.1hao.exe4/stream/Script - OK
7.rar/2.1hao.exe4/stream/data0001 - OK
7.rar/2.1hao.exe4/stream/data0001 - OK
7.rar/2.1hao.exe4/stream/data0001 - OK ...

Hello.

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

显示全部楼层 · 发表于 2009-2-14 23:33:34

09.02.14 更新 240x

显示全部楼层 · 发表于 2009-2-15 00:20:00

TR/Agent.BABW X240

   1 Scanning directories
240 Files were scanned
240 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
240 files were deleted
   0 files were repaired
240 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
240 Notes

[病毒样本] 视频图标exe （09.03.06 更新 360 个）