新变种

显示全部楼层 · 发表于 2009-7-3 16:02:45

新变种

显示全部楼层 · 发表于 2009-7-3 16:05:22

3/7/2009 16:05:39 已偵測: Virus.Win32.Downloader.bi C:\Documents and Settings\kato9096\桌面\dudu.rar/dudu\ctfmen.exe
3/7/2009 16:05:39 已偵測: Trojan-Downloader.Win32.Agent.bhyn C:\Documents and Settings\kato9096\桌面\dudu.rar/dudu\usp10.dll

显示全部楼层 · 发表于 2009-7-3 16:08:36

瑞星 Win32.HHQG.a Trojan.DL.Win32.DllHijack.b

显示全部楼层 · 发表于 2009-7-3 16:18:16

Starting the file scan:

Begin scan in 'D:\TDDownload\dudu.rar'
D:\TDDownload\dudu.rar
  [0] Archive type: RAR
--> dudu\ctfmen.exe
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
--> dudu\usp10.dll
   [DETECTION] Is the TR/Dldr.Agent.bhyn.10 Trojan

Beginning disinfection:
D:\TDDownload\dudu.rar
[WARNING] The file was ignored!

End of the scan: 2009年7月3日星期五  16:18
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   4 Files were scanned
   2 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   0 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2009-7-3 16:19:16

MSE+瑞星

显示全部楼层 · 发表于 2009-7-3 16:23:41

McAfee 已自动阻止和删除特洛伊木马程序。

关于此特洛伊木马程序
已检测到: Generic Downloader.x!be (特洛伊木马程序), Generic Downloader.x!be (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\dudu\dudu\usp10.dll

显示全部楼层 · 发表于 2009-7-3 17:09:49

DR.WEB
ctfmen.exe - probably infected with BACKDOOR.Trojan

TO DW

显示全部楼层 · 发表于 2009-7-3 18:12:44

C:\Documents and Settings\Administrator\My Documents\桌面\dudu.rar > RAR > dudu\ctfmen.exe - Win32/TrojanDownloader.Agent.PBY 病毒
C:\Documents and Settings\Administrator\My Documents\桌面\dudu.rar > RAR > dudu\usp10.dll - Win32/TrojanDownloader.Agent.OQW 特洛伊木马

显示全部楼层 · 发表于 2009-7-3 18:18:35

nod

RAR > dudu\ctfmen.exe Win32/TrojanDownloader.Agent.PBY virus
RAR > dudu\usp10.dll Win32/TrojanDownloader.Agent.OQW trojan

显示全部楼层 · 发表于 2009-7-3 18:35:09

日期和时间：  2009-7-3 18:34:54
文件名：  usp10.dll
原始路径：  C:\Documents and Settings\Administrator\桌面\dudu\
文件大小：  7.5 KB
病毒名称：  Trojan-Dropper.Agent
建议：  保存并删除
特征编号：  27956798

日期和时间：  2009-7-3 18:34:54
文件名：  ctfmen.exe
原始路径：  C:\Documents and Settings\Administrator\桌面\dudu\
文件大小：  60.54 KB
病毒名称：  Virus.Win32.Downloader
建议：  保存并删除
特征编号：  991757

[病毒样本] 新变种

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块