抓的一個toolbar，過了小A，蜘蛛和NOD32

显示全部楼层 · 发表于 2007-5-6 18:02:44

無語了。。。。。這種東西nod32很少報

显示全部楼层 · 发表于 2007-5-6 18:06:19

瑞星不杀广告程序，所以只能发现木马

C:\Documents and Settings\moonsilver\桌面\TOOLBAR
.rar>>TOOLBAR\TOOLBAR.exe>>

显示全部楼层 · 发表于 2007-5-6 18:07:48

显示全部楼层 · 发表于 2007-5-6 18:08:58

卡喜欢小厂家的
detected: adware not-a-virus:AdWare.Win32.Softomate.x File: C:\Documents and Settings\Owner\×ÀÃæ\TOOLBAR.rar/TOOLBAR\TOOLBAR.exe//stream//data0005

显示全部楼层 · 发表于 2007-5-6 18:09:04

[quote]原帖由 moonsilver 于 2007-5-6 18:06 发表

瑞星不杀广告程序

C:\Documents and Settings\moonsilver\桌面\TOOLBAR
.rar>>TOOLBAR\TOOLBAR.exe>>

显示全部楼层 · 发表于 2007-5-6 18:09:51

原帖由 aoyang 于 2007-5-6 18:07 发表

费尔晕报木马无语

显示全部楼层 · 发表于 2007-5-6 18:09:53

Starting the file scan:

Begin scan in 'F:\样本\TOOLBAR.rar'
F:\样本\TOOLBAR.rar
  [0] Archive type: RAR
  --> TOOLBAR\TOOLBAR.exe
   [DETECTION] Contains signature of the dropper DR/Softomate.X.34
   [INFO]    The file was moved to '468ca9b6.qua'!

显示全部楼层 · 发表于 2007-5-6 18:10:59

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-6
Start time: 2007-5-6 18:11
Engine(s): KAV engine (AVK 17.4461), BD-Engine (BD 17.3197)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: TOOLBAR/TOOLBAR.exe/stream data0005
In archive: C:\Documents and Settings\Administrator\桌面\TOOLBAR.rar
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Softomate.x (KAV engine)
Object: TOOLBAR\TOOLBAR.exe=>(NSIS o) lzma_solid_nsis0005
In archive: C:\Documents and Settings\Administrator\桌面\TOOLBAR.rar
Status: Virus detected
Virus: Adware.Softomate.X (BD-Engine)
Object: TOOLBAR.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Softomate.x (KAV engine), Adware.Softomate.X (BD-Engine)
Analysis complete: 2007-5-6 18:11
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-6 18:11:11

只报这个文件，NSE_TOOLBAR.dll

[病毒样本] 抓的一個toolbar，過了小A，蜘蛛和NOD32

本帖子中包含更多资源

本帖子中包含更多资源