卡巴，红伞均无反应~高手帮忙分析

显示全部楼层 · 发表于 2009-3-12 16:22:16

朋友电脑开机UAC就跳未能识别的程序。这个explorer在USER文件夹里。可能还有其他的文件，但是我还没有找到

显示全部楼层 · 发表于 2009-3-12 16:25:10

VirusBuster found nothing
http://virscan.org/report/bfa1faccf3ddf0cb8b092a5fbd79734f.html

显示全部楼层 · 发表于 2009-3-12 16:30:12

to kaba kill ！

Hello,

explorer.exe - Trojan.Win32.Agent.buka

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由幸福的猪猪于 2009-3-13 06:30 编辑 ]

显示全部楼层 · 发表于 2009-3-12 16:34:26

avira found nothing

显示全部楼层 · 发表于 2009-3-12 16:36:53

Norton found nothing.

显示全部楼层 · 发表于 2009-3-12 16:38:10

这个也太明显了吧，“系统文件”怎么可能用delphi写？

显示全部楼层 · 发表于 2009-3-12 16:53:12

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00276746.

We received the following archive files:File ID    Filename Size (Byte) Result
25285805    explorer.rar 64.51 KB OK

A listing of files contained inside archives alongside their results can be found below:File ID    Filename Size (Byte) Result
25285806    explorer.exe    130.82 KB    MALWARE

Please find a detailed report concerning each individual sample below: Filename Result    explorer.exe    MALWARE

The file 'explorer.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Agent.rac. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2009-3-12 16:58:08

过咖啡8.7

还过江民2008

显示全部楼层 · 发表于 2009-3-12 17:00:08

继续过蜘蛛

显示全部楼层 · 发表于 2009-3-12 17:59:28

Sophos found nothing

[病毒样本] 卡巴，红伞均无反应~高手帮忙分析

本帖子中包含更多资源

回复 1楼 williamcr 的帖子

回复 1楼 williamcr 的帖子