tl03.exe

qianwenxiang

刚觉着今天没怎么被忽悠 这家伙就蹦出来了。。

>hxp://www.youfu110.cn/tupian/qq2.bmp
>hxp://qq2009888.cn/

黑衣~魂

DR.WEB
tl03x.exe;Probably BACKDOOR.Trojan
TO

saga3721

'HEUR/Crypted' [heuristic]

Palkia

病毒        2009-04-01  20:24:01        C:\Documents and Settings\Administrator\桌面\tl03.rar\tl03x.exe\BindFile\3.exe        Win32.TrojDownloader.ub.212992 (木马下载器)        跳过，未处理       
病毒        2009-04-01  20:24:01        C:\Documents and Settings\Administrator\桌面\tl03.rar\gdiplus.exe        Win32.TrojDownloader.ub.212992 (木马下载器)        跳过，未处理

BING126

McAfee miss

左手

2009-04-01 22:57:55    创建文件      操作:阻止
进程路径:E:\virus\tl03x.exe
文件路径:C:\WINDOWS\tl
触发规则:所有程序规则->03-禁止创建文件的目录（黑名单）->%windir%\*


2009-04-01 22:57:57    创建文件      操作:阻止并结束进程
进程路径:E:\virus\un1.exe
文件路径:C:\WINDOWS\~DF70C.tmp
触发规则:应用程序规则->02-允许修改的程序->*.*->%windir%\*

ledled

Name: Packed/FSG
Type: Sequence

Description:


Files:
c:\users\administrator\desktop\tl03x.exe|3.exe

Name: Packed/FSG
Type: Sequence

Description:


Files:
c:\users\administrator\desktop\gdiplus.exe

sam.to

你能否上报卡巴??

wrq

Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed


A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... e0&t=1238602068
Information Is the TR/Crypt.FKM.Gen Trojan


--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.129, VDF 7.1.3.1

尤金卡巴斯基

2009/4/2 0:22:48        已删除        木马程序 Trojan.Win32.Agent.bylc        G:\Temp\Virus\tl03.rar/gdiplus.exe//FSG               
2009/4/2 0:22:48        已删除        木马程序 Trojan.Win32.Agent.bylc        G:\Temp\Virus\tl03.rar/tl03x.exe/3.exe//FSG               

Miss 1,To KL