2X

中邪

MSE：
类别: 密码窃取程序

说明: 这个程序很危险，它捕获用户密码。

建议: 立即删除这个软件。

Microsoft Security Essentials 检测到可能会侵害您的隐私或损坏计算机的程序。即使不删除这些程序，仍然可以访问它们所使用的文件(不推荐)。若要访问这些文件，请选择“允许”操作，并单击“应用操作”。如果此选项不可用，请以管理员身份登录或请求本地管理员提供帮助。

项目:
containerfile:C:\Documents and Settings\Owner\桌面\2X.rar
file:C:\Documents and Settings\Owner\桌面\2X.rar->isyq.exe
file:C:\Documents and Settings\Owner\桌面\2X.rar->timeupdate1.exe

金罡

毒霸可杀。。。


网盾修复：


第二个运行后自毁！


2010-09-25 16:13:41    应用程序保护已经开 ...
liulangzhecgr 发表于 2010.9.25 17:13

请问5楼的朋友是用什么软件分析的结果

solstice1988

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00604734.




We received the following archive files:



File ID Filename Size (Byte) Result
25895300  2X.rar 77.76 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID Filename Size (Byte) Result
25895301  isyq.exe  87 KB  MALWARE
25895082  timeupdate1.exe  87 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
isyq.exe  MALWARE

The file 'isyq.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.AO.4015. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.12.31.

Filename Result
timeupdate1.exe  MALWARE

The file 'timeupdate1.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.AO.4015. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.12.31.

qweteacher

卡巴