一个伪装的很好的木马下载器

显示全部楼层 · 发表于 2009-3-29 20:15:41

操作提示：进入软件界面后，将关机时间设为一分钟。
在“选择关机类型”中选择“仅提示Time Out”后在关注一下你的防火墙

然后找找个各个硬盘下的隐藏文件，下了的还望顶一下！！！

[ 本帖最后由 605550642 于 2009-3-29 21:14 编辑 ]

显示全部楼层 · 发表于 2009-3-29 20:19:44

Vista无法运行

显示全部楼层 · 发表于 2009-3-29 20:21:53

NOD32启发了，卡巴 miss了。。。

显示全部楼层 · 发表于 2009-3-29 20:23:16

又见baidu。。。

山山
病毒 2009-03-29 20:23:59 C:\Documents and Settings\Administrator\桌面\生成物\qooshutdown.exe Win32.Troj.Unknown.a.147483 (木马程序) 隔离成功

显示全部楼层 · 发表于 2009-3-29 20:23:38

Starting the file scan:

Begin scan in 'D:\new\��.rar'
D:\new\��.rar
  [0] Archive type: RAR
--> adtuosa.exe
   [DETECTION] Contains recognition pattern of the DR/BaiduBar dropper
   --> [ProgramFilesDir]/baidu/bar/BDBar_tmp/BaiduBar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/BaiduBar.Z.2 adware or spyware
[NOTE]    A backup was created as '49cd688e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\new\qooshutdown.zip'
D:\new\qooshutdown.zip
  [0] Archive type: ZIP
--> qooshutdown.exe
   [DETECTION] Contains HEUR/Malware suspicious code
[NOTE]    A backup was created as '4a3e6900.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年3月29日  20:24
Used time: 00:01 Minute(s)

The scan has been done completely.

   0 Scanned directories
   9 Files were scanned
   2 Viruses and/or unwanted programs were found
   1 Files were classified as suspicious
   2 files were deleted
   0 Viruses and unwanted programs were repaired
   2 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   3 Archives were scanned
   0 Warnings
   2 Notes

显示全部楼层 · 发表于 2009-3-29 20:37:33

To KL

显示全部楼层 · 发表于 2009-3-29 20:44:31

显示全部楼层 · 发表于 2009-3-29 20:47:19

McAfee miss

显示全部楼层 · 发表于 2009-3-30 08:44:28

Name: Adware.BaiduSobar.C
Type: Trojan

Description:

Files:
c:\users\administrator\desktop\adtuosa.exe

显示全部楼层 · 发表于 2009-3-30 09:01:55

卡巴不报

[病毒样本] 一个伪装的很好的木马下载器

本帖子中包含更多资源

filseclab

本帖子中包含更多资源

浏览过的版块