1.exe [ MD5:5aeb58c]

显示全部楼层 · 发表于 2009-7-10 05:25:10

	2009-07-09 Found nothing		2009-07-09 Win32:Trojan-gen
	2009-07-09 Trojan-Dropper.Delf!IK		2009-07-09 Trojan-Dropper.Delf
	2009-07-09 Win32:Trojan-gen {Other}		2009-07-09 Found nothing
	2009-07-09 BHO.JCJ		2009-07-09 Win32/BHO.NQV
	2009-07-09 TR/BHO.Gen		2009-07-09 Found nothing
	2009-07-09 Found nothing		2009-07-09 Found nothing
	2009-07-09 Found nothing		2009-07-09 Found nothing
	2009-07-09 Found nothing		2009-07-09 Mal/Generic-A
	2009-07-09 Found nothing		2009-07-08 Found nothing
	2009-07-08 Found nothing		2009-07-09 Found nothing
	2009-07-09 Found nothing

显示全部楼层 · 发表于 2009-7-10 05:55:33

to kaba kill。

Hello,

1.exe_ - Trojan-Dropper.Win32.Agent.avpm

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

[ 本帖最后由幸福的猪猪于 2009-7-10 06:42 编辑 ]

显示全部楼层 · 发表于 2009-7-10 08:30:04

McAfee 已自动阻止和删除特洛伊木马程序。

关于此特洛伊木马程序
已检测到: Artemis!354D2E3AB343 (特洛伊木马程序), Artemis!354D2E3AB343 (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\1\1.exe

2009-07-10 08:30:02 应用程序保护(运行应用程序)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\1\1.exe
文件路径:C:\WINDOWS\system32\regsvr32.exe
命令行:/s QQ.dll
2009-07-10 08:30:02 文件保护(修改文件)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\1\1.exe
文件路径:(隐藏文件)C:\Sandbox\Administrator\DefaultBox\drive\C\WINDOWS\system32\QQ.dll
2009-07-10 08:30:02 应用程序保护(修改其它进程内存)    操作:阻止
进程路径:C:\WINDOWS\explorer.exe
目标进程:C:\Documents and Settings\Administrator\桌面\新建文件夹\1\1.exe

显示全部楼层 · 发表于 2009-7-10 09:18:37

MicroPoint Success to del it!
Trojan.Win32.Agent.dkf

显示全部楼层 · 发表于 2009-7-10 09:35:02

瑞星2010
Trojan.Win32.Generic.11E9F848

[病毒样本] 1.exe [ MD5:5aeb58c]

本帖子中包含更多资源

回复 1楼 mofunzone 的帖子