[病毒样本] 2

显示全部楼层 · 发表于 2009-2-27 22:40:01

红伞通杀。。。。

显示全部楼层 · 发表于 2009-2-28 00:02:41

程序：
C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\RAR$EX00.444\XX.EXE
木马程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\ZDLZP\LOCAL SETTINGS\TEMP\DLL13.TMP
是否删除木马程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\RAR$EX00.033\JQLT.EXE
木马程序生成以下文件：
1) C:\WINDOWS\SYSTEM32\EC3HFZA1.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2009-2-28 00:03:10

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... 96&t=1235750553
Information:  Contains recognition pattern of the DR/Delphi.Gen dropper

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.98, VDF 7.1.2.94

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... e8&t=1235750553
Information:  Is the TR/Crypt.XPACK.Gen Trojan

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.98, VDF 7.1.2.94

显示全部楼层 · 发表于 2009-2-28 03:54:47

ESET
C:\Documents and Settings\GUNDAM\桌面\jqlt.rar » RAR » jqlt.exe - Win32/Prosti.NBZ trojan
C:\Documents and Settings\GUNDAM\桌面\xx.rar » RAR » xx.exe - probably a variant of Win32/AutoRun.Agent.IE worm

[ 本帖最后由 leonfg 于 2009-2-28 11:58 编辑 ]