Trojan.Jevafus

显示全部楼层 · 发表于 2009-4-12 17:24:57

名字挺奇特

显示全部楼层 · 发表于 2009-4-12 17:26:19

Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... ba&t=1239528362
Information Is the TR/Jevafus.B Trojan

--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.138, VDF 7.1.3.42
同意楼主

显示全部楼层 · 发表于 2009-4-12 17:26:36

TR/Jevafus.B

显示全部楼层 · 发表于 2009-4-12 19:34:55

To KL

显示全部楼层 · 发表于 2009-4-12 19:38:33

2009-04-12 19:38:05 修改注册表内容    操作:阻止
进程路径:E:\virus\p.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Personal
触发规则:所有程序规则->07-系统和软件操作（黑白名单）->*\Software\Microsoft\Windows*\*

2009-04-12 19:38:05 修改注册表内容    操作:阻止
进程路径:E:\virus\p.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Desktop
触发规则:所有程序规则->07-系统和软件操作（黑白名单）->*\Software\Microsoft\Windows*\*

2009-04-12 19:38:05 修改注册表内容    操作:阻止
进程路径:E:\virus\p.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Cookies
触发规则:所有程序规则->03-IE浏览器设置保护（黑名单）增强->*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

显示全部楼层 · 发表于 2009-4-12 20:00:45

文件或对象名称病毒名称最终处理状态
E:\My Documents\桌面\test\p\p.exe Trojan.Jevafus.H 已移动至隔离区

显示全部楼层 · 发表于 2009-4-12 20:12:27

Hello,

p.exe_ - Trojan-Dropper.Win32.Js.te

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Andrey Ladikov
Virus Analyst, Kaspersky Lab.

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-4-12 20:13:16

js 0

显示全部楼层 · 发表于 2009-4-12 20:24:05

McAfee miss

显示全部楼层 · 发表于 2009-4-12 21:19:14

估计那啥JavaObfuscate。。跟这个应该一样：http://safelab.spaces.live.com/b ... 3DBD59AF!1119.entry

hxp://sex4you.crazynet.org/ldr/j1_2.php?s= >> about:blank
hxp://search.hopto.org/ldr/j1_2.php?s=
hxp://adult.oo.lv/ldr/j1_2.php?s=

...

[病毒样本] Trojan.Jevafus

本帖子中包含更多资源

BD