[病毒样本] 3

显示全部楼层 · 发表于 2010-1-9 01:11:46

這個誤報嗎?

显示全部楼层 · 发表于 2010-1-9 01:36:02

http://www.virustotal.com/zh-cn/ ... 626eef1b-1262971972

2010/1/9 1:32:33 已删除木马程序 Packed.Win32.Krap.aj G:\Temp\Virus\新建文件夹.rar/userinit.exe
2010/1/9 1:32:33 已删除木马程序 Trojan-Mailfinder.Win32.Agent.th G:\Temp\Virus\新建文件夹.rar/win32x.sys

显示全部楼层 · 发表于 2010-1-9 04:00:53

本帖最后由牧羊老汉于 2010-1-9 04:13 编辑

conim.exe

* Possible StringData Ref from Code Obj ->"SuperSleep "
* Possible StringData Ref from Code Obj ->"360setp.txt"
* Possible StringData Ref from Code Obj ->"system360 "
* Possible StringData Ref from Code Obj ->"smss.exe "
* Possible StringData Ref from Code Obj ->"C:\Program Files\Internet Explorer\iexplore.exe"
* Possible StringData Ref from Code Obj ->"http://www.nnie.cn/vip.html "
* Possible StringData Ref from Code Obj ->"C:\Program Files\Windows Media Player\wmplayer.exe,0"
* Possible StringData Ref from Code Obj ->"C:\Program Files\Internet Explorer\"
* Possible StringData Ref from Code Obj ->"Desktop "
* Possible StringData Ref from Code Obj ->"Favorites"
* Possible StringData Ref from Code Obj ->"scripting.filesystemobject"
* Possible StringData Ref from Code Obj ->"coopen_setup_43077.exe"
* Possible StringData Ref from Code Obj ->"b.bat"
* Possible StringData Ref from Code Obj ->"del b.bat"
* Possible StringData Ref from Code Obj ->"exit"

显示全部楼层 · 发表于 2010-1-9 07:14:31

MSE
userinit.exe：Spammer:Win32/Tedroo.A
win32x.sys：Trojan:Win32/Trafog!rts

显示全部楼层 · 发表于 2010-1-9 09:39:33

E:\download\新建文件夹.rar
  [0] Archive type: RAR
--> userinit.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> win32x.sys
   [DETECTION] Is the TR/Rootkit.Gen Trojan

conim 上报红伞

显示全部楼层 · 发表于 2010-1-9 10:32:51

userinit.exe——Generic Dropper.lr
win32x.sys——Generic Spy.e

显示全部楼层 · 发表于 2010-1-9 12:07:58

瑞星

E:\DL\conim.rar>>conim.exe
Trojan.Win32.VBCode.avt

E:\DL\新建文件夹.rar>>win32x.sys
RootKit.Win32.Nodef.di

显示全部楼层 · 发表于 2010-1-9 12:08:31

RS20100109120233812422

显示全部楼层 · 发表于 2010-1-9 12:22:38

9/1/2010 12:21:25 Detected Trojans Packed.Win32.Krap.aj High Exact C:\Documents and Settings\kato\桌面\新建文件夹.rar/userinit.exe
9/1/2010 12:21:28 Detected Trojans Trojan-Mailfinder.Win32.Agent.th High Exact C:\Documents and Settings\kato\桌面\新建文件夹.rar/win32x.sys

显示全部楼层 · 发表于 2010-1-9 17:15:05

conim.exe - Trojan-Downloader.Win32.VB.ual

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[病毒样本] 3

本帖子中包含更多资源