newads22.exe

显示全部楼层 · 发表于 2009-2-17 23:27:56

c58cc1cfe044256fadfc710dc27e99d8 newads22.exe

18/2/2009 12:29:38 已偵測: Trojan-PSW.Win32.QQPass.gad C:\Documents and Settings\kato9096\桌面\71424710471.rar/71424710471\newads22.ex2e/UPX

[ 本帖最后由 sam.to 于 2009-2-18 12:29 编辑 ]

显示全部楼层 · 发表于 2009-2-17 23:30:31

Begin scan in 'D:\71424710471.rar'
D:\71424710471.rar
[NOTE] A backup was created as '49ced83c.qua' ( QUARANTINE )
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2009-2-17 23:31:24

Virus: TR/ATRAPS.Gen
Type: Trojan
In the wild: Yes
Reported Infections: Low
Distribution Potential: Low
Damage Potential: Low
Static file: No
Engine version: 7.08.00.16

显示全部楼层 · 发表于 2009-2-17 23:35:07

DR.WEB
newads22.ex2e - infected with Trojan.PWS.Lineage.origin

今天TO好多

显示全部楼层 · 发表于 2009-2-17 23:36:00

VirusBuster found nothing

显示全部楼层 · 发表于 2009-2-17 23:56:46

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... b0&t=1234886193
Information: Is the TR/ATRAPS.Gen Trojan

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.79, VDF 7.1.2.37

显示全部楼层 · 发表于 2009-2-18 01:00:37

显示全部楼层 · 发表于 2009-2-18 08:22:24

FSCS8

扫描类型: 扫描目标
目标: C:\Documents and Settings\zyc\桌面\71424710471.rar

Name :	Barok
Alias:	Trojan.PSW.Barok
Type:	Trojan-PSW
Category:	Malware
Platform:	W32

[ 本帖最后由 zhanyuchenbobo 于 2009-2-18 09:52 编辑 ]

显示全部楼层 · 发表于 2009-2-18 09:40:45

2009-02-18 09:40:23 创建文件操作:阻止
进程路径:E:\virus\71424710471\newads22.exe
文件路径:C:\Program Files\Internet Explorer\PointPo.Oko
触发规则:所有程序规则->允许创建文件的目录（含黑名单）->*Program Files\*

2009-02-18 09:40:23 创建文件操作:阻止
进程路径:E:\virus\71424710471\newads22.exe
文件路径:C:\Program Files\Internet Explorer\PowerDo.Rel
触发规则:所有程序规则->允许创建文件的目录（含黑名单）->*Program Files\*

显示全部楼层 · 发表于 2009-2-18 10:24:21

[病毒样本] newads22.exe

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块