1x

幸福的猪猪

Avira miss,to kill.

We received the following archive files:

File ID	?Filename	Size (Byte)	Result
25401735	one.rar	82.33 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	?Filename	Size (Byte)	Result
25401736	91.exe	104.49 KB	MALWARE

Please find a detailed report concerning each individual sample below:

?Filename	Result
91.exe	MALWARE

The file '91.exe' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Agent.cjaa. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.




kaba miss，to  kill。

Hello,

91.exef - Trojan-Downloader.Win32.Agent.cjaa

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.


在沙盘测试，弹出一个含有uc下载地址的记事本，然后给你安装启用一个服务。（名字貌似是Winhelp）

[ 本帖最后由 幸福的猪猪 于 2009-7-21 05:22 编辑 ]

LEYUSGO

费尔miss.............

Palkia

one.rar             82.62/82.62KB       100.00%    在线扫描      没有发现病毒，但这并不能说明此文件百分之百可信。2009-7-19 8:43:33    2009-7-19 8:43:50

wxwz

360杀毒报启发
Gen:Trojan.Heur.4024DBE9E9

hddu

EQ拦截，一般病毒。

2009-07-19 09:11:20    运行应用程序      操作:阻止
进程路径:E:\one\91.exe
文件路径:C:\WINDOWS\system32\notepad.exe
命令行:C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\9158.txt
触发规则:应用程序规则->运行其它程序设置->?:\*->%windir%\system32\notepad.exe

2009-07-19 09:11:51    创建文件      操作:阻止并结束进程
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\DS_Serp.exe
文件路径:C:\WINDOWS\system32\WinHelp32.exe
触发规则:所有程序规则->WINDOWS文件夹设置->%windir%\system*\*.exe

2009-07-19 09:11:51    创建文件      操作:阻止并结束进程
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\DS_Serp.exe
文件路径:C:\WINDOWS\system32\WinHelp32.exe
触发规则:所有程序规则->WINDOWS文件夹设置->%windir%\system*\*.exe

saga3721

通过运行CMD绕过红伞、微点，外加强行重启反卡巴主防

hddu

费尔声明： 文件安全

失落的手链

瑞星2010
Trojan.Win32.Generic.11EAF4BA

1p1

瑞星  Trojan.Win32.Generic.11EAF4BA

呵呵反应好快啊

acbiu