火狐狸木马(3)

显示全部楼层 · 发表于 2007-5-14 00:20:16

火狐狸木马

显示全部楼层 · 发表于 2007-5-14 00:22:52

显示全部楼层 · 发表于 2007-5-14 00:24:15

D:\Documents and Settings\dell\桌面\新建文件夹\
D:\Documents and Settings\dell\桌面\新建文件夹\EE808006d01.rar
  [0] Archive type: RAR
--> EE808006d01
   [1] Archive type: RAR
   --> Temp\X7349.com
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Drop.Boran.I
      [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
D:\Documents and Settings\dell\桌面\新建文件夹\EE80F94Fd01.rar
  [0] Archive type: RAR
--> EE80F94Fd01
   [1] Archive type: RAR
   --> jh.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
D:\Documents and Settings\dell\桌面\新建文件夹\EE80F977d01.rar
  [0] Archive type: RAR
--> EE80F977d01
   [1] Archive type: RAR
   --> Setup.exe
      [DETECTION] Is the Trojan horse TR/VB.GR
      [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-14 00:28:01

detected: Trojan program Trojan-Spy.Win32.Delf.rn URL: http://bbs.kafan.cn/attachment.p ... 94Fd01//jh.exe//UPX

detected: virus Worm.Win32.VB.gr URL: http://bbs.kafan.cn/attachment.p ... 0F977d01//Setup.exe

漏一个

显示全部楼层 · 发表于 2007-5-14 01:01:22

NOD32全过

，AVAST杀了2个

显示全部楼层 · 发表于 2007-5-14 07:41:25

原帖由 伯夷叔齐 于 2007-5-14 00:20 发表
火狐狸木马

显示全部楼层 · 发表于 2007-5-14 08:10:01

红伞杀

显示全部楼层 · 发表于 2007-5-14 10:12:53

都是运行就开了dos窗口，没有其他动作呀

显示全部楼层 · 发表于 2007-5-14 10:17:14

已删除: 木马程序 Trojan-Spy.Win32.Delf.rn 文件: D:\Documents and Settings\Administrator\桌面\EE80F94Fd01.rar/EE80F94Fd01/jh.exe//UPX
已清毒: 病毒 Worm.Win32.VB.gr 文件: D:\Documents and Settings\Administrator\桌面\EE80F977d01.rar/EE80F977d01/Setup.exe

显示全部楼层 · 发表于 2007-5-14 18:58:54

费尔:
1.EE80F977d01病毒
2.EE80F94Fd01木马
3.EE808006d01广告程序

火狐狸木马(3)

本帖子中包含更多资源

AVK

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源