[病毒样本] 1X

显示全部楼层 · 发表于 2009-12-9 13:28:55

修改删除IE主页 ==

http://www.virscan.org/report/e95cb772ff1e0dbedf926ae8eb9bb095.html

http://www.virustotal.com/zh-
cn/analisis/13f8c666347b3a2fbbda0930b6e4f06892587acc26d542d3b02b99445108a50b-1260334590

显示全部楼层 · 发表于 2009-12-9 13:30:49

Begin scan in 'C:\Users\z2665\Desktop\20096411hhh512083.rar'
C:\Users\z2665\Desktop\20096411hhh512083.rar
  [0] Archive type: RAR
--> 20096411hhh512083.exe
   [1] Archive type: RAR SFX (self extracting)
   --> e2.exe
      [2] Archive type: RSRC
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan

Beginning disinfection:
C:\Users\z2665\Desktop\20096411hhh512083.rar
[NOTE]    The file was moved to '4b4f361c.qua'!

显示全部楼层 · 发表于 2009-12-9 14:05:54

本帖最后由 fatezero 于 2009-12-9 16:00 编辑

to kl

您好，

20096411hhh512083.exe_ - Trojan-Dropper.Win32.VB.mwr

以上文件包含恶意代码，下次更新后即可查杀。感谢您的上报。

显示全部楼层 · 发表于 2009-12-9 14:11:18

MSE无事。

显示全部楼层 · 发表于 2009-12-9 15:28:12

红伞杀了呵呵

显示全部楼层 · 发表于 2009-12-9 19:35:18

"Win32:Trojan-gen"

显示全部楼层 · 发表于 2009-12-9 20:25:51

Win32:Trojan-gen

显示全部楼层 · 发表于 2009-12-9 21:20:01

Virus: Win32:Trojan-gen (Engine B)

显示全部楼层 · 发表于 2009-12-9 21:39:15

McAfee 报了可疑月神。。

显示全部楼层 · 发表于 2009-12-9 22:46:55

C:\Documents and Settings\Administrator\桌面\20096411hhh512083.rar > RAR > 20096411hhh512083.exe > RAR > e2.exe - Win32/TrojanDropper.VB.NLK 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\20096411hhh512083.rar > RAR > 20096411hhh512083.exe > RAR > xin.exe > RAR > AnySetup.exe - 正常
C:\Documents and Settings\Administrator\桌面\20096411hhh512083.rar > RAR > 20096411hhh512083.exe > RAR > eg.url - 正常
C:\Documents and Settings\Administrator\桌面\20096411hhh512083.rar:Zone.Identifier - 正常
C:\Documents and Settings\Administrator\桌面\20096411hhh512083.rar > RAR > 20096411hhh512083.exe > RAR > e2.exe - Win32/TrojanDropper.VB.NLK 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\20096411hhh512083.rar > RAR > 20096411hhh512083.exe > RAR > xin.exe > RAR > AnySetup.exe - 正常
C:\Documents and Settings\Administrator\桌面\20096411hhh512083.rar > RAR > 20096411hhh512083.exe > RAR > eg.url - 正常

[病毒样本] 1X

本帖子中包含更多资源