一个广告程序

显示全部楼层 · 发表于 2007-5-8 16:03:24

0000000000

显示全部楼层 · 发表于 2007-5-8 16:04:16

KIS621报了

显示全部楼层 · 发表于 2007-5-8 16:05:01

nod32杀广告能力实在是

显示全部楼层 · 发表于 2007-5-8 16:08:10

瑞星不杀广告

显示全部楼层 · 发表于 2007-5-8 16:08:43

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!

===============================================
___________病毒查杀结果__________________

===============================================

2007年5月8日16时8分34秒开始查杀C:\Documents and Settings\Administrator\桌面\advertisement
威胁性文件：C:\Documents and Settings\Administrator\桌面\advertisement\53.exe
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\advertisement\53.exe 带壳文件:UPX加壳
-----------------------------------------

2007年5月8日16时8分36秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

显示全部楼层 · 发表于 2007-5-8 16:35:27

BitDefender Antivirus Plus v10
advertisement.rar=>53.exe Infected: MemScan:Trojan.Vundo.AJ

显示全部楼层 · 发表于 2007-5-8 17:29:22

显示全部楼层 · 发表于 2007-5-8 17:31:28

We received the following archive files:

File ID  Filename  Size (Byte) Result
539043  advertisement.rar 21.67 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
537323  53.exe  30.54 KB  MALWARE

Please find a detailed report concerning each individual sample below:

Filename Result
53.exe  MALWARE

The file '53.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Vundo.AJ.56. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.38.01.70.
--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

红伞杀！

显示全部楼层 · 发表于 2007-5-8 17:32:45

蜘蛛过，红伞杀
Begin scan in 'C:\Documents and Settings\Administrator\桌面\advertisement.rar'
C:\Documents and Settings\Administrator\桌面\advertisement.rar
  [0] Archive type: RAR
  --> 53.exe
   [DETECTION] Is the Trojan horse TR/Vundo.AJ.56
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-9 03:22:45

一个劲地解放.sys文件

[病毒样本] 一个广告程序

本帖子中包含更多资源

本帖子中包含更多资源

向system32下释放N多dll

本帖子中包含更多资源