又是hengbang

显示全部楼层 · 发表于 2009-4-30 21:30:51

我晕

显示全部楼层 · 发表于 2009-4-30 21:34:02

显示全部楼层 · 发表于 2009-4-30 21:34:15

When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=525186&k=f830784c483de9a1fe94688abc32e5be&t=1241098418"
a virus or unwanted program 'TR/Gendal.45056.5' [trojan] was found.
Action taken: Blocked file

显示全部楼层 · 发表于 2009-4-30 21:36:14

DW
fonst.rar/fonst.dll\data001;D:\Documents and Settings\Administrator\桌面\fonst.rar/fonst.dll;Trojan.DownLoader.36054;;
fonst.rar/fonst.dll\data002;D:\Documents and Settings\Administrator\桌面\fonst.rar/fonst.dll;Trojan.DownLoad.1713;;
fonst.dll;D:\Documents and Settings\Administrator\桌面;Container contains infected objects;;
fonst.rar;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2009-4-30 21:40:42

显示全部楼层 · 发表于 2009-4-30 21:40:45

Kill the red umbrella

显示全部楼层 · 发表于 2009-4-30 21:42:57

avira kill

显示全部楼层 · 发表于 2009-4-30 21:54:30

C:\Documents and Settings\Administrator\桌面\新建文件夹\fonst.rar > RAR > fonst.dll - 可能是 Win32/Genetik 特洛伊木马的变种 - 是已删除对象的一部分

显示全部楼层 · 发表于 2009-4-30 22:04:15

--> fonst.dll
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the TR/Gendal.45056.5 Trojan
   --> Object
      [DETECTION] Contains recognition pattern of the ADSPY/Hengbang.AJ.2 adware or spyware

显示全部楼层 · 发表于 2009-4-30 22:18:57

McAfee Generic PUP

[病毒样本] 又是hengbang

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源