1.exe（13日第1次更新，总数第14次更新）

显示全部楼层 · 发表于 2009-2-26 16:28:34

BHO,杀

显示全部楼层 · 发表于 2009-2-26 16:47:27

广告程序就我大蜘蛛和卖咖啡给杀了

显示全部楼层 · 发表于 2009-2-26 16:55:54

DR.WEB
09022601-1.exe/data002\p.dll.zgx;09022601-1.exe/data002;Adware.Sogou.origin;;
data002;;Archive contains infected objects;;
09022601-1.exe/data003\s.exe;\09022601-1.exe/data003;Probably DLOADER.Trojan;;
data003\;Archive contains infected objects;;
09022601-1.exe;D;Container contains infected objects;;

显示全部楼层 · 发表于 2009-2-26 16:57:11

nod32 not pass

显示全部楼层 · 发表于 2009-2-26 18:29:12

to rs

显示全部楼层 · 发表于 2009-2-26 18:44:22

更新了

显示全部楼层 · 发表于 2009-2-26 18:46:41

附件发在回帖吧，不然不知道哪个文件更新

09022602-1.exe found nothing

显示全部楼层 · 发表于 2009-2-26 19:01:53

DR.WEB KILL ALL

09022602-1.exe/data002\p.dll.zgx;D:\Documents and Settings\Administrator\桌面\09022602-1.exe/data002;Adware.Sogou.origin;;
data002;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
09022602-1.exe/data003\s.exe;D:\Documents and Settings\Administrator\桌面\09022602-1.exe/data003;Probably DLOADER.Trojan;;
data003;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
09022602-1.exe;D:\Documents and Settings\Administrator\桌面;Container contains infected objects;;
09022601-1.exe/data002\p.dll.zgx;D:\Documents and Settings\Administrator\桌面\09022601-1.exe/data002;Adware.Sogou.origin;;
data002;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
09022601-1.exe/data003\s.exe;D:\Documents and Settings\Administrator\桌面\09022601-1.exe/data003;Probably DLOADER.Trojan;;
data003;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
09022601-1.exe;D:\Documents and Settings\Administrator\桌面;Container contains infected objects;;
09022502-1.exe/data002\p.dll.zgx;D:\Documents and Settings\Administrator\桌面\09022502-1.exe/data002;Adware.Sogou.origin;;
data002;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
09022502-1.exe/data003\s.exe;D:\Documents and Settings\Administrator\桌面\09022502-1.exe/data003;Probably DLOADER.Trojan;;
data003;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
09022502-1.exe;D:\Documents and Settings\Administrator\桌面;Container contains infected objects;;

显示全部楼层 · 发表于 2009-2-26 22:33:46

When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=473470&k=4fe6d86a0b263f28de9e7bdd32755b99&t=1235658782"
a virus or unwanted program 'TR/Drop.Agent.ahwz' [trojan] was found.
Action taken: Blocked file

显示全部楼层 · 发表于 2009-2-26 23:31:22

C:\Documents and Settings\GUNDAM\桌面\09022602-1.rar » RAR » 09022602-1.exe - a variant of Win32/TrojanDropper.Agent.XIA trojan
C:\Documents and Settings\GUNDAM\桌面\09022601-1.rar » RAR » 09022601-1.exe - a variant of Win32/TrojanDropper.Agent.XIA trojan
C:\Documents and Settings\GUNDAM\桌面\09022502-1.rar » RAR » 09022502-1.exe - a variant of Win32/TrojanDropper.Agent.XIA trojan

[病毒样本] 1.exe（13日第1次更新，总数第14次更新）

回复 16楼 ghj89100062 的帖子