drweb发现的,过卡巴^

显示全部楼层 · 发表于 2009-4-1 14:34:51

Hello,

all[1].htm_ - Trojan.JS.Agent.wo,
google[1].htm_ - Trojan.JS.Agent.wp,
kc[1].htm_ - Trojan.JS.Agent.wq

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2009-4-1 14:35:51

'TR/ATRAPS.Gen [trojan]'
'TR/Crypt.UPKM.Gen [trojan]'

显示全部楼层 · 发表于 2009-4-1 14:44:37

"Win32:Trojan-gen {Other}" has been found in "updater.exe" file.
"JS:Obfuscated-AC [Trj]" has been found in "all[1].htm" file.
"JS:Obfuscated-AC [Trj]" has been found in "kc[1].htm" file.
"JS:Obfuscated-AC [Trj]" has been found in "google[1].htm" file.
"Win32:Rootkit-gen [Rtk]" has been found in "wab.exe.tmp\[Upack]\[Embedded_I#030a0]\[Embedded_I#c9a0]" file.

显示全部楼层 · 发表于 2009-4-1 15:48:41

2009-04-01 15:48:20 创建注册表值操作:阻止
进程路径:E:\virus\updater.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
注册表名称:Ferrari
触发规则:所有程序规则->02-注册表启动项保护（黑名单）增强->*\SOFTWARE\Microsoft\Windows\CurrentVersion\Run*

显示全部楼层 · 发表于 2009-4-1 16:46:14

卡巴 The requested URL http://bbs.kafan.cn/attachment.p ... 0b&t=1238575499 is infected with Backdoor.Win32.Agent.afei virus

显示全部楼层 · 发表于 2009-4-1 17:12:36

怎么一发到测试区的就全被查杀了呢，好厉害，难道高手和小白的差别在版本上都有区别呵呵……

显示全部楼层 · 发表于 2009-4-1 17:15:34

费尔全杀

显示全部楼层 · 发表于 2009-4-1 18:15:41

avast也全杀

显示全部楼层 · 发表于 2009-4-1 18:45:53

DR.WEB
updater.exe - infected with Trojan.DownLoad.33528
all[1].htm\jAvAsCrIpT.0 - infected with Trojan.DownLoad.33530
kc[1].htm\jAvAsCrIpT.0 - infected with Trojan.DownLoad.33530
google[1].htm\jAvAsCrIpT.0 - infected with Trojan.DownLoad.33530
wab.exe.tmp - infected with Trojan.MulDrop.30799

[病毒样本] drweb发现的,过卡巴^

本帖子中包含更多资源

卡巴回复

评分