常见网马4只

显示全部楼层 · 发表于 2010-10-19 23:16:45

本帖最后由 qigang 于 2010.10.19 23:17 编辑

http://222.186.38.172:99/x12.exe

http://gsdrkyuio.gicp.net/game/mh/mh.exe

http://serv.ahau.edu.cn/inc/tl/1.exe

http://serv.ahau.edu.cn/inc/tl/party.css

显示全部楼层 · 发表于 2010-10-19 23:19:48

卫士报，BD查出三个……

显示全部楼层 · 发表于 2010-10-19 23:39:48

小AKILL

显示全部楼层 · 发表于 2010-10-19 23:51:46

GD全杀

显示全部楼层 · 发表于 2010-10-19 23:53:14

2010/10/19 23:52:22 已删除木马程序 Trojan-Downloader.Win32.Geral.vng G:\Temp\Virus\4.rar/x12.exe//PE_Patch
2010/10/19 23:52:22 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.xfqv G:\Temp\Virus\4.rar/mh.exe
2010/10/19 23:52:22 已删除木马程序 Trojan.JS.Zapchast.dh G:\Temp\Virus\4.rar/party.css

To KL

显示全部楼层 · 发表于 2010-10-19 23:53:27

MSE...KILL3只....MISS1...toMSE

显示全部楼层 · 发表于 2010-10-20 00:49:38

显示全部楼层 · 发表于 2010-10-20 07:30:07

ess kill3个，to1个

D:\下载文件夹\4.rar > RAR > x12.exe - Win32/AntiAV.NGR 特洛伊木马的变种
D:\下载文件夹\4.rar > RAR > mh.exe - Win32/PSW.OnLineGames.PBW 特洛伊木马的变种
D:\下载文件夹\4.rar > RAR > 1.exe - Win32/PSW.OnLineGames.QLE 特洛伊木马的变种

http://samples.nod32.com.sg/inde ... 9909e9666b9643b6389

显示全部楼层 · 发表于 2010-10-20 07:54:57

aivra kill all

Begin scan in 'D:\Download\4.rar'
D:\Download\4.rar
[0] Archive type: RAR
  [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
  --> x12.exe
--> Object
  [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
  --> mh.exe
--> Object
   [2] Archive type: RSRC
--> Object
  [DETECTION] Is the TR/PSW.OnlineGames.xfqw Trojan
--> 1.exe
  [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
--> party.css
  [DETECTION] Contains recognition pattern of the HTML/Shellcode.Gen HTML script virus
[NOTE]    The file was moved to quarantine directory and named '4e698e8a.qua'!

显示全部楼层 · 发表于 2010-10-20 10:00:48

panda miss 2x to xandora
Trj/CI.A
W32/Spamta.gen.worm

[病毒样本] 常见网马4只

浏览过的版块