[病毒样本] 32X

显示全部楼层 · 发表于 2009-3-21 16:15:01

new开头的，通通提示不是有效的win32程序~！
newads28.exe，NSIS图标那个，运行没反应~！
setup那个运行看着像是一个安装程序，会释放一个AZUREUS_INSTALLER.exe，貌似很像一个FakeAlert~！
tb2运行没动静！
tb4运行后只有一个外联动作！
tb5运行以后没动静！

其它的AVGIS都杀了~！

显示全部楼层 · 发表于 2009-3-21 16:21:14

--> new11.exe
   [DETECTION] Contains HEUR/Crypted suspicious code
--> RTSk16.dll
   [DETECTION] Contains recognition pattern of the SPR/SpyAgent.AA program
--> setup.exe
   [DETECTION] Contains recognition pattern of the DR/ForBot.AM.3 dropper
--> tb1.exe
   [DETECTION] Is the TR/Dldr.Agent.badl Trojan
--> tb6.exe
   [DETECTION] Is the TR/Drop.Agent.jaf Trojan
--> tb9.exe
   [DETECTION] Is the TR/Dldr.VB.iqv Trojan
--> tb10.exe
   [DETECTION] Is the TR/Dldr.VB.iqv Trojan
--> winsrvc.exe
   [DETECTION] Is the TR/Agent.iza Trojan
--> YahooDLL.dll
   [DETECTION] Contains recognition pattern of the SPR/SpyAgent.60006.11 program
红伞总共报9个。

显示全部楼层 · 发表于 2009-3-21 19:26:57

凝逸反毒 ok:0|毒:10|末知:19|31/32|每秒3个文件

显示全部楼层 · 发表于 2009-3-21 20:52:05

DR.WEb KILL 5
TO-27