Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

显示全部楼层 · 发表于 2009-4-25 18:49:25

C:\Documents and Settings\Owner\桌面\dzh_2009v5(38).rar
  [0] Archive type: RAR
[NOTE]    The file was deleted!
--> 053C3E9F382600FDF8E36E58C2936DEF.exe
   [1] Archive type: NSIS
   --> [TempDir]/qq2009.exe
      [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
   --> [TempDir]/lqbz82.exe
      [DETECTION] Is the TR/Drop.Agent.PAL Trojan
   --> [TempDir]/install_205412.exe
      [DETECTION] Is the TR/Dldr.Agent.brcr Trojan
   --> [TempDir]/small66.exe
      --> Object
      [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
   --> [TempDir]/spools.exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
   --> [TempDir]/kzd2009.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
   --> [TempDir]/IETimbar(-50331499).exe
      [2] Archive type: NSIS
      --> Software//Microsoft//Windows//CurrentVersion//Explorer//Browser Helper Objects//{489873CE-F3E1-44A3-8E89-04BE26BE4446}/IETimbar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/IETimbar adware or spyware

显示全部楼层 · 发表于 2009-4-26 19:06:15

Update

显示全部楼层 · 发表于 2009-4-26 23:40:56

dr.web
D:\Documents and Settings\Administrator\桌面\cc.css - probably infected with MULDROP.Trojan
D:\Documents and Settings\Administrator\桌面\cc.css\data001 - infected with Trojan.AVKill.664
D:\Documents and Settings\Administrator\桌面\cc.css\data003 - infected with Trojan.KillProc.1565

Archive contains 3 infected items

显示全部楼层 · 发表于 2009-4-27 19:07:36

Update

显示全部楼层 · 发表于 2009-4-27 19:09:40

21556223946BDE75B3200101DD62DED6.exe avira miss

显示全部楼层 · 发表于 2009-4-28 19:24:04

Update

显示全部楼层 · 发表于 2009-4-29 18:07:23

Update

显示全部楼层 · 发表于 2009-4-30 12:24:07

Update

显示全部楼层 · 发表于 2009-4-30 18:17:20

Update

显示全部楼层 · 发表于 2009-4-30 18:58:22

哇....不会是全部都是病毒吧....

[病毒样本] Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

回复 120楼 935623508 的帖子