火狐狸木马(4)

显示全部楼层 · 发表于 2007-5-14 08:32:09

过火狐的木马岂又少了，自己点击下载，木马便“过”了火狐
楼主就这样说过了火狐，真搞笑

显示全部楼层 · 发表于 2007-5-14 10:16:46

我只解压缩出来一个呀，还是运行弹dos窗口的，和楼主前面发的一样

显示全部楼层 · 发表于 2007-5-14 10:19:13

已删除: 木马程序 Backdoor.Win32.Bandok.d 文件: D:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\BANDOOK V1.2.EXE//PE_Patch//MewBundle//MEW
已删除: 木马程序 Backdoor.Win32.VB.adf 文件: D:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\builder.exe
已删除: 恶意软件 Constructor.Win32.Agent.n 文件: D:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\DOWN1.1.exe//UPX
已删除: 木马程序 Trojan-Downloader.Win32.Aphex.10.a 文件: D:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\editor.exe//UPX//Splasher
已删除: 木马程序 Backdoor.Win32.Small.ou 文件: D:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\EditServer.exe
已删除: 木马程序 Backdoor.Win32.Small.em 文件: D:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\mercury.exe
已删除: 木马程序 Backdoor.Win32.PeepViewer.202 文件: D:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\PEEP.EXE

显示全部楼层 · 发表于 2007-5-14 11:50:34

原帖由 solcroft 于 2007-5-14 08:32 发表
过火狐的木马岂又少了，自己点击下载，木马便“过”了火狐
楼主就这样说过了火狐，真搞笑

我可没有那么弱智,不是下载的包,而是不知道进了什么网,中了.

显示全部楼层 · 发表于 2007-7-2 10:03:10

可惜没早看到这篇文,今早下了个,去一些网站溜了一圈,结果用AVG查出6个,卡巴报了2个木马

显示全部楼层 · 发表于 2007-7-2 11:19:36

原帖由 欠你幸福 于 2007-5-14 01:02 发表
NOD32

好老的版本
7个的说
怀疑nod不报的两个并不是毒
只是黑客工具而已
不准备上报了

显示全部楼层 · 发表于 2007-7-2 11:27:07

Starting the file scan:

Begin scan in 'F:\病毒样本\EE80F969d01.rar'
F:\病毒样本\EE80F969d01.rar
  [0] Archive type: RAR
--> EE80F969d01
   [1] Archive type: RAR
   --> 10¸öÑù±¾\BANDOOK V1.2.EXE
      [DETECTION] Contains signature of the backdoor control software BDC/Bandok.d.A.
   --> 10¸öÑù±¾\builder.exe
      [DETECTION] Contains signature of the backdoor control software BDC/VB.adf.
   --> 10¸öÑù±¾\DOWN1.1.exe
      [DETECTION] Contains signature of the construction kit KIT/Agent.N
   --> 10¸öÑù±¾\editor.exe
      [DETECTION] Is the Trojan horse TR/Apher.Gen.A
   --> 10¸öÑù±¾\EditServer.exe
      [DETECTION] Contains signature of the backdoor control software BDC/Aviaent.
   --> 10¸öÑù±¾\mercury.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Small.EM.4 Backdoor server programs
   --> 10¸öÑù±¾\nc.exe
      [DETECTION] Contains signature of the SPR/Delf.1.A.2 program
   --> 10¸öÑù±¾\NetCat.exe
      [DETECTION] Contains signature of the SPR/RemoteAdmin.Net program
   --> 10¸öÑù±¾\PEEP.EXE
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/PeepViewer.G Backdoor server programs
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-2 12:50:16

2007/7/2 12:47:52 Scanning Log
2007/7/2 12:47:52 Version of virus signature database: 2368 (20070701)
2007/7/2 12:47:52 Date: 2.7.2007 Time: 12:47:52
2007/7/2 12:47:52 Scanned disks, folders and files: D:\virus\
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar - multiple threats - deleted - quarantined
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 - multiple threats
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 » RAR » 10个样本\BANDOOK V1.2.EXE - Win32/Bandok.D trojan
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 » RAR » 10个样本\builder.exe - probably unknown NewHeur_PE virus [7]
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 » RAR » 10个样本\editor.exe - Win32/TrojanDownloader.Aphex.010.A trojan
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 » RAR » 10个样本\mercury.exe - Win32/Small.EM trojan
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 » RAR » 10个样本\nc.exe - Win32/RemoteAdmin.NetCat application
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 » RAR » 10个样本\NetCat.exe - Win32/RemoteAdmin application
2007/7/2 12:47:54 D:\virus\EE80F969d01.rar » RAR » EE80F969d01 » RAR » 10个样本\PEEP.EXE - Win32/PeepViewer.202.A trojan
2007/7/2 12:47:54 Number of scanned files: 12
2007/7/2 12:47:54 Number of threats found: 7
2007/7/2 12:47:54 Time of completion: 12:47:54 Total scanning time: 2 sec (00:00:02)
2007/7/2 12:47:54 Notes:
2007/7/2 12:47:54 [7] File is probably infected with an unknown virus.