load.exe

显示全部楼层 · 发表于 2009-7-16 16:35:10

SUBMIT TO AVIRA

显示全部楼层 · 发表于 2009-7-16 16:36:09

The file 'load.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Ursnif.J. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2009-7-16 16:49:13

IKARUS - T3SCAN V1.32.10.0 (WIN32)
      T3 V1.01.64
      Copyright (c) 2006 - 2009 by Ikarus Software.
      All rights reserved.

Signature-database from 16.7.2009 08:01:25 (Build: 73045)

e:\load.rar:load.exe - Signature 'Backdoor.Win32.Zdoogu' found
e:\load.rar - Signature 'Backdoor.Win32.Zdoogu' found

      2 Files scanned
      (1 Archiv with 1 file)
      2 Signatures found
      0 Suspect code-parts found
      Used time: 0:01.234

显示全部楼层 · 发表于 2009-7-16 16:59:57

直接访问磁盘后联网

显示全部楼层 · 发表于 2009-7-16 17:05:32

查询编号：RS20090716164130437215
文件名称：load.rar
文件MD5：24177281C179B0A4D237860F2A1F4962
文件状态：压缩文件，包含1个文件

文件名	MD5	状态	病毒名称	解决版本号
load.exe	9139CA063...	安全文件

显示全部楼层 · 发表于 2009-7-16 17:39:42

卡巴有掃到

显示全部楼层 · 发表于 2009-7-16 17:41:39

程序：
F:\NEWVIRUS\LOAD.EXE
木马程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\~TM54EA3A.TMP
是否删除木马程序及其衍生物?

删除。。

显示全部楼层 · 发表于 2009-7-16 21:38:20

2009/7/16 21:35:54 已清除木马程序 Backdoor.Win32.Zdoogu.er G:\Temp\Virus\load.rar/load.exe

显示全部楼层 · 发表于 2009-7-16 21:41:32

Send to Arcabit

[病毒样本] load.exe

本帖子中包含更多资源

浏览过的版块