毒网

显示全部楼层 · 发表于 2007-5-9 14:14:12

http://vod.qlez.com/default.htm

显示全部楼层 · 发表于 2007-5-9 14:15:09

等人法样本

显示全部楼层 · 发表于 2007-5-9 14:18:38

原帖由 EQ2 于 2007-5-9 14:15 发表
等人法样本

样本

显示全部楼层 · 发表于 2007-5-9 14:19:40

Scan performed at: 2007-5-9 14:19:51
Scanning Log
NOD32 version 2250 (20070508) NT
Command line: C:\Documents and Settings\EQ2\桌面\0[1].rar
Operating memory - is OK

Date: 9.5.2007 Time: 14:19:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\0[1].rar
C:\Documents and Settings\EQ2\桌面\0[1].rar ?RAR ?0[1].exe - Win32/Pacex.Gen virus
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:19:58 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-5-9 14:19:51

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\0[1].rar'
C:\Documents and Settings\morgan\My Documents\
  0[1].rar
[0] Archive type: RAR
--> 0[1].exe
      [DETECTION] Is the Trojan horse TR/Drop.Ag.344576.B
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-9 14:23:23

我来补漏，加3个一个网马一个脚本一个生成物

显示全部楼层 · 发表于 2007-5-9 14:25:10

Scan performed at: 2007-5-9 14:25:12
Scanning Log
NOD32 version 2250 (20070508) NT
Command line: C:\Documents and Settings\EQ2\桌面\3.zip
Operating memory - is OK

Date: 9.5.2007 Time: 14:25:16
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\3.zip
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?ban[1].js - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?install.com - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?servet.exe - Win32/Pacex.Gen virus
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 14:25:21 Total scanning time: 5 sec (00:00:05)

显示全部楼层 · 发表于 2007-5-9 14:31:12

kv监控报一个qqpass

主动防御报警vbs

[ 本帖最后由 kp2006 于 2007-5-9 14:36 编辑 ]

显示全部楼层 · 发表于 2007-5-9 14:37:29

全灭

[ 本帖最后由 moonsilver 于 2007-5-9 14:38 编辑 ]

显示全部楼层 · 发表于 2007-5-9 16:33:52

Begin scan in 'C:\3.zip'
C:\3.zip
  [0] Archive type: ZIP
  --> ban[1].js
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> install.com
   [DETECTION] Is the Trojan horse TR/Drop.Ag.344576.B
  --> servet.exe
   [DETECTION] Is the Trojan horse TR/Drop.Ag.344576.B
   [INFO]    The file was deleted!

[病毒样本] 毒网

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源