9X低质量

显示全部楼层 · 发表于 2009-5-3 16:08:14

RT，红伞全杀的不用上报了。。

显示全部楼层 · 发表于 2009-5-3 16:11:19

"E:\9X.rar:\www.exe";"Runtime packed upack";""

显示全部楼层 · 发表于 2009-5-3 16:27:26

江民启发杀了2个

显示全部楼层 · 发表于 2009-5-3 16:41:18

8 to js

显示全部楼层 · 发表于 2009-5-3 16:51:47

3/5/2009 16:48:53 已偵測: Trojan-Downloader.Win32.Geral.hw C:\Documents and Settings\kato9096\桌面\9X.rar/a.css/PE_Patch.UPX/UPX

1 file killed by KIS 2009, to kl

显示全部楼层 · 发表于 2009-5-3 17:51:59

显示全部楼层 · 发表于 2009-5-3 18:01:12

--> ad2_wanbo.jpg
   [DETECTION] Contains recognition pattern of the HTML/PicFrame.Gen HTML script virus
--> ad5_wanbo.jpg
   [DETECTION] Contains recognition pattern of the HTML/PicFrame.Gen HTML script virus
--> ad4_wanbo.jpg
   [DETECTION] Contains recognition pattern of the HTML/PicFrame.Gen HTML script virus
--> ad1_wanbo.jpg
   [DETECTION] Contains recognition pattern of the HTML/PicFrame.Gen HTML script virus
--> ad6_wanbo.jpg
   [DETECTION] Contains recognition pattern of the HTML/PicFrame.Gen HTML script virus
--> www.exe
   [DETECTION] Contains recognition pattern of the WORM/Rbot.Gen worm
--> download.swf
   [1] Archive type: SWC
   [DETECTION] Contains recognition pattern of the HTML/FlashFrame.Gen HTML script virus
--> a.css
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> ad3_wanbo.jpg
   [DETECTION] Contains recognition pattern of the HTML/PicFrame.Gen HTML script virus

显示全部楼层 · 发表于 2009-5-3 18:01:50

NAV 需要注意两个

[ 本帖最后由 huangqian202 于 2009-5-3 18:02 编辑 ]

显示全部楼层 · 发表于 2009-5-3 18:17:52

ik 只报2个

显示全部楼层 · 发表于 2009-5-3 19:19:40

2009-05-03 19:19:11 修改注册表内容操作:阻止并结束进程
进程路径:E:\virus\www.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
注册表名称:CheckedValue
触发规则:所有程序规则->A01…系统关键设置保护（黑名单）增强->*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL

[病毒样本] 9X低质量

本帖子中包含更多资源

本帖子中包含更多资源