[病毒样本] 2

显示全部楼层 · 发表于 2010-1-9 02:17:28

本帖最后由牧羊老汉于 2010-1-9 02:39 编辑

Kaspersky
fughile.dll: Trojan-Downloader.Win32.Agent.cyjo
winxp.vbs: Trojan.VBS.Runner.cn

Avira
fughile.dll: TR/Dldr.Agent.cyjo Trojan
winxp.vbs: unknown

winxp.vbs

WScript.Sleep 200000
Set fso = CreateObject("Scripting.FileSystemObject")
fso.DeleteFile(WScript.ScriptName)
If fso.FileExists("C:\WINDOWS\1.exe") Then fso.DeleteFile("C:\WINDOWS\1.exe")
If fso.FileExists("C:\WINDOWS\winxp.exe") Then fso.DeleteFile("C:\WINDOWS\winxp.exe")
If fso.FileExists("C:\WINDOWS\winxp.vbs") Then fso.DeleteFile("C:\WINDOWS\winxp.vbs")

显示全部楼层 · 发表于 2010-1-9 07:14:09

fughile.dll to microsoft

显示全部楼层 · 发表于 2010-1-9 09:36:00

检测到威胁: Trojan.VBS.Runner.cn E:\download\20505.rar/winxp.vbs
检测到威胁: Trojan-Downloader.Win32.Agent.cyjo E:\download\20505.rar/fughile.dll

to avira

显示全部楼层 · 发表于 2010-1-9 09:52:25

E:\virus\20505.rar » RAR » fughile.dll - probably a variant of Win32/Agent.QIF trojan
E:\virus\20505.rar » RAR » fughile.dll - probably a variant of Win32/Agent.QIF trojan - was a part of the deleted object

显示全部楼层 · 发表于 2010-1-9 10:09:25

下载完成！发现病毒！\\?\c:\documents and settings\administrator\桌面\20505.rar->fughile.dll trojandownloader.agent.cavv 2010-1-9 10:06:54 已删除

显示全部楼层 · 发表于 2010-1-9 10:20:28

月神启发杀掉dll
Artemis!D0C273C99966

显示全部楼层 · 发表于 2010-1-9 12:05:26

RS20100109115917640203

显示全部楼层 · 发表于 2010-1-9 12:21:51

9/1/2010 12:20:40 Detected Trojans Trojan-Downloader.Win32.Agent.cyjo High Exact C:\Documents and Settings\kato\桌面\20505.rar/fughile.dll
9/1/2010 12:20:56 Detected Trojans Trojan.VBS.Runner.cn High Exact C:\Documents and Settings\kato\桌面\20505.rar/winxp.vbs

显示全部楼层 · 发表于 2010-1-9 16:08:55

Nis2010 miss

[病毒样本] 2

本帖子中包含更多资源