卡巴报遨游卸载工具为木马

显示全部楼层 · 发表于 2009-5-9 15:35:05

遨游是从官网下的卡巴报木马

显示全部楼层 · 发表于 2009-5-9 18:37:35

不好意思卡巴不让下载

显示全部楼层 · 发表于 2009-5-9 23:38:14

红伞杀！！！

显示全部楼层 · 发表于 2009-5-10 00:28:36

to kl

显示全部楼层 · 发表于 2009-5-10 00:41:55

费尔动态防御报木马

显示全部楼层 · 发表于 2009-5-10 00:47:47

原帖由 ΓＤＤàì▓ 于 2009-5-9 15:35 发表
遨游是从官网下的卡巴报木马

Scanned file: MaxthonUINST.exe Suspicion:

MaxthonUINST.exe Suspicion: Type_Win32

Statistics:

Known viruses:	2155291	Updated:	10-05-2009
File size (Kb):	123	Virus bodies:	0
Files:	1	Warnings:	0
Archives:	0	Suspicious:	1

[ 本帖最后由 328397663 于 2009-5-10 22:22 编辑 ]

显示全部楼层 · 发表于 2009-5-10 01:14:37

杀毒了

显示全部楼层 · 发表于 2009-5-10 08:39:02

File size: 125540 bytes
Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5: 24243432ab1036f8bbeaeb3271e2f2ff
SHA1: 905c5653f9477f7022986f2053e4640c58888c54
Sandbox (Norman): [ General information ]

* File length: 125540 bytes.

[ Changes to filesystem ]
* Creates file C:\WINDOWS\TEMP\TMPFILE.TMP.
* Creates directory C:\WINDOWS\TEMP\.
* Creates file C:\WINDOWS\TEMP\nsn1798.tmp.
* Deletes file C:\WINDOWS\TEMP\nsn1798.tmp.

[ Network services ]
* Downloads file from http://lilj.us/[obfuscated] as cache file.
* Connects to "lilj.us" on port 80 (TCP).
* Opens URL: lilj.us/[obfuscated]

[ Security issues ]
* Starting downloaded file - potential security problem.

[ Process/window information ]
* Creates process "TMPFILE.TMP".

显示全部楼层 · 发表于 2009-5-10 11:58:34

D:\kafan\abcd.exe
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan

显示全部楼层 · 发表于 2009-5-10 12:45:01

趋势报毒

卡巴报遨游卸载工具为木马

本帖子中包含更多资源

本帖子中包含更多资源

回复 9楼 J-F-F 的帖子

本帖子中包含更多资源