1x Adware

显示全部楼层 · 发表于 2009-3-18 16:53:56

在木马群提取的一个，在线检测过的比较多，就放上来了！
kaba miss ，to kill ！

[ 本帖最后由幸福的猪猪于 2009-3-18 16:59 编辑 ]

显示全部楼层 · 发表于 2009-3-18 16:57:16

to VB

显示全部楼层 · 发表于 2009-3-18 17:14:47

Warning

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.
Requested URL: http://bbs.kafan.cn/attachment.p ... 54&t=1237367655
Information Is the TR/Spy.Gen Trojan
Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.116, VDF 7.1.2.184

显示全部楼层 · 发表于 2009-3-18 17:30:26

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3\3.EXE
木马程序生成以下文件：
1) C:\PROGRAM FILES\MICROSOFT OFFICE\SYSTEM\SYSBAR.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEMPORARY INTERNET FILES\CONTENT.IE5\1CD25TVU\29[1].KDG
3) C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\MEDIA PLAYER\OBJ\WMPOBJ.SYS
4) C:\WINDOWS\SYSTEM32\DOPDY.DLL
是否删除RootKit程序?

显示全部楼层 · 发表于 2009-3-18 18:58:26

ik found nothing

显示全部楼层 · 发表于 2009-3-18 19:14:28

Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... 5f&t=1237374446
Information Is the TR/Spy.Gen Trojan

--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.116, VDF 7.1.2.185

显示全部楼层 · 发表于 2009-3-18 20:45:26

McAfee miss

显示全部楼层 · 发表于 2009-3-18 21:02:16

TO-DW

显示全部楼层 · 发表于 2009-3-18 22:36:14

已入库

2009/3/18 22:35:51 已清除广告软件 not-a-virus:AdWare.Win32.BHO.fyy G:\Temp\Virus\3.zip/3.exe//data0003

[病毒样本] 1x Adware

本帖子中包含更多资源