央视315曝光“顶狐”盗号木马 微点秒杀

关9军

微点，八错的说

maslls

金山也秒杀..............

Sebastian

Starting the file scan:

Begin scan in 'D:\new\顶狐下载者 3.90.rar'
D:\new\顶狐下载者 3.90.rar
  [0] Archive type: RAR
    --> ﾶﾥﾺￏￂￔ￘ￕ￟ 3.90\TpxDown.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> ﾶﾥﾺￏￂￔ￘ￕ￟ 3.90\WDFMGR32.EXE
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan

Beginning disinfection:
D:\new\顶狐下载者 3.90.rar
    [NOTE]      The file was moved to '97cbb853.qua'!


End of the scan: 2009年3月18日  08:51
Used time: 00:00 Minute(s)

The scan has been done completely.

      0 Scanned directories
      4 Files were scanned
      2 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 files were deleted
      0 Viruses and unwanted programs were repaired
      1 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

ledled

Name: Trojan.DL.VB.YRQ
Type: Trojan

Description:


Files:
c:\users\administrator\desktop\tpxdown.exe

Name: Trojan.DL.Cryptic.Gen.2
Type: Trojan

Description:


Files:
c:\users\administrator\desktop\wdfmgr32.exe

kingsheet

卡巴  The requested URL http://bbs.kafan.cn/attachment.p ... 40&t=1237340756 is infected with Trojan-Downloader.Win32.VB.apy virus

ximo

原帖由 EQ2 于 2009-3-17 22:09 发表
这个和CCAV上面报道的不一样，CCAV上面的是用vb写的，你的这个虽然生成器用VB写的，但是生成的不是用VB写的

生成的还是VB语言的，只不过外面加了个“套”而已。
采用P-CODE方式编译，烦！

[ 本帖最后由 ximo 于 2009-3-18 11:04 编辑 ]

qwer9909

蜘蛛都杀了。。

[扫描路径] C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar
C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar - 压缩文件 RAR
>C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar/顶狐下载者 3.90\TpxDown.exe 已加壳，方式： UPX
>>C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar/顶狐下载者 3.90\TpxDown.exe 已被病毒感染 ：  Trojan.DownLoader.15805
>C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar/顶狐下载者 3.90\WDFMGR32.EXE 已加壳，方式： PECRYPT
>>C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar/顶狐下载者 3.90\WDFMGR32.EXE 已加壳，方式： UPX
>>>C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar/顶狐下载者 3.90\WDFMGR32.EXE 已被病毒感染 ：  Trojan.DownLoader.15732
>C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar/顶狐下载者 3.90\说明.txt - 确定
C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar - 发现压缩文件中有被感染的对象
C:\Documents and Settings\Administrator\桌面\顶狐下载者 3[1].90.rar:Zone.Identifier - 确定

timhas266

卡巴在06年已入庫

http://www.viruslist.com/en/sear ... loader.Win32.VB.apy

揍敌客

virusname: Trojan-Downloader.Win32.VB.apy

aymf1710

老货 不报就对不起使用者