一个挺好玩的病毒

显示全部楼层 · 发表于 2009-4-15 22:09:02

一个挺好玩的病毒
主要表现是不断的制造文件夹的快捷方式，你建立一个新的文件夹，立即出现一个快捷方式，其他危害尚未发现。请高手研究。
ESET NOD32 可杀此毒

显示全部楼层 · 发表于 2009-4-15 22:16:37

Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... 08&t=1239804973
Information Contains recognition pattern of the RKIT/Agent.6912 root kit

--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.143, VDF 7.1.3.54
好玩？

显示全部楼层 · 发表于 2009-4-15 22:24:02

DW
IPV6.DLL\data001;D:\Documents and Settings\Administrator\桌面\du.rar/du\IPV6.DLL;Probably BACKDOOR.Trojan;;
du\IPV6.DLL;D:\Documents and Settings\Administrator\桌面\du.rar/du;Container contains infected objects;;
Thumbs.lnk\data001;D:\Documents and Settings\Administrator\桌面\du.rar/du\Thumbs.lnk;Probably BACKDOOR.Trojan;;
du\Thumbs.lnk;D:\Documents and Settings\Administrator\桌面\du.rar/du;Container contains infected objects;;
WinXP.bmp\data001;D:\Documents and Settings\Administrator\桌面\du.rar/du\WinXP.bmp;Probably BACKDOOR.Trojan;;
du\WinXP.bmp;D:\Documents and Settings\Administrator\桌面\du.rar/du;Container contains infected objects;;
du.rar;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2009-4-15 22:26:23

文件或对象名称病毒名称最终处理状态
D:\du.rar=]du\IPV6.DLL Trojan.Agent.AHJH
D:\du.rar=]du\Thumbs.lnk Trojan.Agent.AHJH
D:\du.rar=]du\WinXP.bmp Trojan.Agent.AHJH
D:\du.rar=]du\arf Trojan.Autorun.PM
D:\du.rar=]du\AUTORUN.FCB Trojan.Autorun.PM
D:\du.rar=]du\AutoRun.Inf Trojan.Autorun.PM

显示全部楼层 · 发表于 2009-4-15 22:28:28

McAfee 报了6个。。

arf                         generic!atr
autorun.fcb          generic!atr
autorun.inf          generic!atr
ipv6.dll                w32/autorun.worm.db
thumbs.lnk          w32/autorun.worm.db
winxp.bmp             w32/autorun.worm.db

显示全部楼层 · 发表于 2009-4-15 22:35:03

15/4/2009 22:34:16 已偵測: Backdoor.Win32.Agent.fpe C:\Documents and Settings\kato9096\桌面\du.rar/du\IPV6.DLL
15/4/2009 22:34:25 已偵測: Backdoor.Win32.Agent.fpe C:\Documents and Settings\kato9096\桌面\du.rar/du\Thumbs.lnk
15/4/2009 22:34:25 已偵測: Backdoor.Win32.Agent.fpe C:\Documents and Settings\kato9096\桌面\du.rar/du\WinXP.bmp

不报的是清潔

显示全部楼层 · 发表于 2009-4-15 23:01:53

代理木马

显示全部楼层 · 发表于 2009-4-15 23:18:50

Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
513849&k=36a06729cff065dffbe43f975fbb655
d&t=1239808703

发生下列错误：

请求的对象被感染，发现下列病毒 Backdoor.Win32.Agent.fpe

如有疑问，请联系您的技术支持
创建日期：
Wed Apr 15 23:18:35 2009
Kaspersky Lab

显示全部楼层 · 发表于 2009-4-15 23:55:49

McAfee8.5i 报6个

显示全部楼层 · 发表于 2009-4-16 09:57:38

卡巴 The requested URL http://bbs.kafan.cn/attachment.p ... bc&t=1239847012 is infected with Backdoor.Win32.Agent.fpe virus

[病毒样本] 一个挺好玩的病毒

本帖子中包含更多资源