奇怪的一个样本

显示全部楼层 · 发表于 2007-4-19 17:20:34

红伞右键报4个，剩下的已上报了

Starting the file scan:

Begin scan in 'C:\Documents and Settings\FEAR\My Documents\Downloads\Compressed\TEMP'
C:\Documents and Settings\FEAR\My Documents\Downloads\Compressed\TEMP\a.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was moved to '468c3405.qua'!
C:\Documents and Settings\FEAR\My Documents\Downloads\Compressed\TEMP\main.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was moved to '46903438.qua'!
C:\Documents and Settings\FEAR\My Documents\Downloads\Compressed\TEMP\Rav20.dll
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was moved to '469d3438.qua'!
C:\Documents and Settings\FEAR\My Documents\Downloads\Compressed\TEMP\rundl132.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was moved to '4695344d.qua'!

显示全部楼层 · 发表于 2007-4-19 17:29:06

卡巴7.0报2个启发
quarantined: virus Invader (modification) File: C:\Documents and Settings\NICE\桌面\TEMP\rundl132.exe
quarantined: virus Invader (modification) File: C:\Documents and Settings\NICE\桌面\TEMP\main.exe

显示全部楼层 · 发表于 2007-4-19 18:23:18

无聊的病毒

版本 16.0.7
病毒库签名 2007-4-19
开始时间: 2007-4-19 18:22
引擎: KAV 引擎 (AVK 17.3590), BD  引擎
启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: rundl132.exe
路径: E:\TEMP
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD  引擎)
对象: main.exe
路径: E:\TEMP
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD  引擎)
Analysis complete: 2007-4-19 18:22
7 files checked
2 infected files detected
发现 0 个可疑文件

显示全部楼层 · 发表于 2007-4-19 23:14:11

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\TEMP'
C:\Documents and Settings\morgan\My Documents\TEMP\
  1.exe
  main.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [WARNING] The file was ignored!
  Rav20.dll
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [WARNING] The file was ignored!
  rundl132.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [WARNING] The file was ignored!
  ~DF2903.tmp
  ~DF9F4A.tmp

显示全部楼层 · 发表于 2007-4-20 00:32:02

蜘蛛杀了4个

显示全部楼层 · 发表于 2007-4-20 01:20:17

红伞又飘了。。。。。。。。。。

[病毒样本] 奇怪的一个样本

本帖子中包含更多资源