挂马网站一个

显示全部楼层 · 发表于 2007-4-19 21:52:04

红伞和费尔同时报

显示全部楼层 · 发表于 2007-4-19 21:56:52

deleted: virus Trojan.Generic (modification) File: C:\TDDOWNLOAD\jh.exe//ASPack

显示全部楼层 · 发表于 2007-4-19 23:16:08

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\jh.exe'
C:\TDDOWNLOAD\
  jh.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-19 23:18:07

Time Module Object Name Threat Action User Information
2007-4-19 23:18:24 IMON file http://game.itcoo.com.cn/jh.exe probably a variant of Win32/Genetik trojan KASPERSK-56C566\EQ2

显示全部楼层 · 发表于 2007-4-20 11:03:25

创建时间文件名创建者
:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\NEWINFO.VXD C:\WINNT\~TMP6495.EXE
:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM.2DT C:\WINNT\~TMP6495.EXE
:\WINNT\~TMP6495.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
:\DOCUMENTS AND SETTINGS\MASTER.MASTE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\MTGKSN2L\B[1].EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

[病毒样本] 挂马网站一个

微点拦

本帖子中包含更多资源