一个样本及衍生物

显示全部楼层 · 发表于 2007-5-16 08:28:51

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\jkkjkli.rar'
C:\Documents and Settings\morgan\My Documents\
  jkkjkli.rar
[0] Archive type: RAR
--> jkkjkli.dll
      [DETECTION] Is the Trojan horse TR/Vundo.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\crack.rar'
C:\Documents and Settings\morgan\My Documents\
  crack.rar
[0] Archive type: RAR
--> crack.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-16 08:32:08

crack
estovaný súbor bol oznečený ako: Čistý(clean)
jkkjkli
estovaný súbor bol oznečený ako: Čistý(clean)

显示全部楼层 · 发表于 2007-5-16 08:44:01

crack.rar启发
第二个没有反应。
费尔。

显示全部楼层 · 发表于 2007-5-16 09:00:01

detected: adware not-a-virus:AdWare.Win32.Virtumonde.if File: C:\Documents and Settings\Owner\×ÀÃæ\crack.rar/crack.exe//Virtumonde
detected: adware not-a-virus:AdWare.Win32.Virtumonde.jp File: C:\Documents and Settings\Owner\×ÀÃæ\jkkjkli.rar/jkkjkli.dll

显示全部楼层 · 发表于 2007-5-16 09:19:13

已检测到: 广告程序 not-a-virus:AdWare.Win32.Virtumonde.if URL: http:/bbs.kafan.cn/attachment.php?aid=70735/crack.exe/Virtumonde
已检测到: 广告程序 not-a-virus:AdWare.Win32.Virtumonde.jp URL: http:/bbs.kafan.cn/attachment.php?aid=70736/jkkjkli.dll

卡6

显示全部楼层 · 发表于 2007-5-16 17:31:22

另外一个无法运行

显示全部楼层 · 发表于 2007-5-16 17:33:44

已删除: 广告软件 not-a-virus:AdWare.Win32.Virtumonde.if 文件: D:\Documents and Settings\Administrator\桌面\crack.rar/crack.exe//Virtumonde
已删除: 广告软件 not-a-virus:AdWare.Win32.Virtumonde.jp 文件: D:\Documents and Settings\Administrator\桌面\jkkjkli.rar/jkkjkli.dll

显示全部楼层 · 发表于 2007-5-16 19:55:59

趨勢Intellitrap啟發式技術報一個

[病毒样本] 一个样本及衍生物

本帖子中包含更多资源

本帖子中包含更多资源

微点报未知间谍

本帖子中包含更多资源