毒网一个，相当猖狂

显示全部楼层 · 发表于 2007-3-28 01:21:04

dongman.org.cn/Shop/zhoubian/dmtz/200608/28.shtml

微点杀掉了。但是桌面有残留物没杀干净，忘记截图了。

样本3楼下，感谢3楼的朋友代提样本，

[ 本帖最后由 sbgg110 于 2007-3-28 02:01 编辑 ]

显示全部楼层 · 发表于 2007-3-28 01:24:15

咖啡监控都没反应，虽然提示了好几次语法错误，可能跟补丁有关系

显示全部楼层 · 发表于 2007-3-28 01:33:11

开卡巴上去看了看

很疯狂把卡巴保护给关了厉害最后屏幕多了不好程序 D盘也感染了

不过装了影子重起后就好了~`

针对漏洞的

我的是没打补丁~

样本~~

[ 本帖最后由 tonger2003 于 2007-3-28 01:45 编辑 ]

显示全部楼层 · 发表于 2007-3-28 01:38:59

为什么偶没事？？？？谁给个样本？

显示全部楼层 · 发表于 2007-3-28 01:52:51

nod32隔离了4个

显示全部楼层 · 发表于 2007-3-28 02:05:50

补丁很全.打开后只有语法错误.没有病毒警告.进程无异常.卡巴完好.

显示全部楼层 · 发表于 2007-3-28 02:14:33

看来是IE漏洞吧换了个Opear后开网页卡巴就没有报警了~~~

显示全部楼层 · 发表于 2007-3-28 02:41:50

一大队无法执行的16-bit档案

该报得Cyberhawk都报了，懒得截图了

显示全部楼层 · 发表于 2007-3-28 02:46:00

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\新建文件夹0'
C:\Documents and Settings\morgan\My Documents\新建文件夹0\新建文件夹0\新建文件夹\
  073264.exe
  2.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
   [INFO]    The file was deleted!
  20276.exe
  3.exe
  bind_50386.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '467766dd.qua'!
  Chenzi.exe
  Chenzi.vbs
   [DETECTION] Contains signature of the Java script virus JS/Dldr.Agen.6260.B
   [INFO]    The file was deleted!
  exploere.exe
   [DETECTION] Is the Trojan horse TR/Drop.Cinmus.M.1
   [INFO]    The file was deleted!
  explorer.exe
  lanlan.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
   [INFO]    The file was deleted!
  mh.exe
  my.exe
  run.exe
  setup_dm_0019.exe
  sovhoe.exe
  systam.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.2442
   [INFO]    The file was deleted!
  temp.exe
  yaku0015.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-28 03:18:08

EQ兄要小心了,您可能已中招

[病毒样本] 毒网一个，相当猖狂

本帖子中包含更多资源

本帖子中包含更多资源