转网马一只，过avast!

显示全部楼层 · 发表于 2007-5-8 01:59:46

太大了，懒得打包，自己下载去
http://www.forodeortodoncia.com/a_friend.exe

显示全部楼层 · 发表于 2007-5-8 02:25:23

卡7 报

显示全部楼层 · 发表于 2007-5-8 02:32:50

费尔报

显示全部楼层 · 发表于 2007-5-8 02:56:06

KIS 6 扫到好多@@

显示全部楼层 · 发表于 2007-5-8 02:57:10

红伞
Begin scan in 'D:\test\a_friend.exe'
D:\test\a_friend.exe
  [0] Archive type: RAR SFX (self extracting)
  --> mirc.ini
   [DETECTION] Is the Trojan horse TR/PSW.Zapchast.439
  --> csrss.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/mIRC-593262.A Backdoor server programs
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-8 03:16:23

Time Module Object Name Threat Action User Information
2007-5-8 3:16:24 IMON self-extracting archive http://www.forodeortodoncia.com/a_friend.exe multiple infiltrations Connection terminated KASPERSK-56C566\EQ2

显示全部楼层 · 发表于 2007-5-8 06:17:47

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\a_friend.exe'
C:\TDDOWNLOAD\
  a_friend.exe
   [DETECTION] Contains signature of the dropper DR/PSW.Zapchast.1197
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-8 11:19:21

运行后微点报，应该是捆绑了东西

显示全部楼层 · 发表于 2007-5-8 11:28:26

显示全部楼层 · 发表于 2007-5-8 12:14:46

vba
F:\a_friend.exe:<RAR>\mirc.ini : is suspected of Backdoor.IRC.Zapchast#190
F:\a_friend.exe:<RAR>\csrss.exe : infected BackDoor.IRC.based
F:\a_friend.exe:<RAR>\sup.exe : infected Trojan.BAT.Runner.b

[病毒样本] 转网马一只，过avast!

本帖子中包含更多资源

本帖子中包含更多资源

MCAFEE报木马：IRC/Flood.gen.dr (特洛伊)