[病毒样本] 2x

显示全部楼层 · 发表于 2009-5-15 12:37:30

2009-05-15 12:37:13 创建文件操作:阻止并结束进程
进程路径:E:\virus\TDDOWNLOAD\nl6.exe
文件路径:C:\WINDOWS\fOnts\pKxp3cBbnHVb65ZWUDgRE5.Ttf
触发规则:应用程序规则->A04-常见修改程序组->*.*->%windir%\*

显示全部楼层 · 发表于 2009-5-15 13:07:47

微点heur 2x

显示全部楼层 · 发表于 2009-5-15 22:10:40

McAfee 报了1个。。

显示全部楼层 · 发表于 2009-5-16 02:52:50

原帖由 幸福的猪猪 于 2009-5-15 08:42 发表
kaba miss 1x，heur 1x，to kill ！

Scanned file: TDDOWNLOAD.zip - Infected

TDDOWNLOAD.zip/TDDOWNLOAD/nl1.exe - infected by Trojan-GameThief.Win32.WOW.nmd
TDDOWNLOAD.zip/TDDOWNLOAD/nl6.exe - infected by Trojan-PSW.Win32.LdPinch.afuo

Statistics:

Known viruses:	2179809	Updated:	15-05-2009
File size (Kb):	42	Virus bodies:	2
Files:	2	Warnings:	0
Archives:	1	Suspicious:	0

显示全部楼层 · 发表于 2009-5-16 11:11:28

伞杀之
   [0] 压缩文档类型: ZIP
--> TDDOWNLOAD/nl1.exe
   [检测]       Is the TR/Dropper.Gen Trojan
--> TDDOWNLOAD/nl6.exe
   [检测]       Is the TR/Crypt.XDR.Gen Trojan