网马 #4

显示全部楼层 · 发表于 2007-5-27 10:55:19

KV将其斩立决，报木马下载者

显示全部楼层 · 发表于 2007-5-27 10:59:25

Starting the file scan:

Begin scan in 'F:\样本\z0.zip'
F:\样本\z0.zip
  [0] Archive type: ZIP
  --> z0.exe
   [DETECTION] Is the Trojan horse TR/Spy.BZub.IZ
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-27 11:01:52

detected: Trojan program Trojan-Spy.Win32.BZub.iz URL: http://bbs.kafan.cn/attachment.php?aid=76540/z0.exe

显示全部楼层 · 发表于 2007-5-27 11:57:34

Avast!报了,

显示全部楼层 · 发表于 2007-5-27 12:01:26

[Scan path] C:\Documents and Settings\Administrator\桌面\z0.zip
>C:\Documents and Settings\Administrator\桌面\z0.zip\z0.exe infected with Trojan.PWS.Lineage
C:\Documents and Settings\Administrator\桌面\z0.zip - archive contains infected objects

显示全部楼层 · 发表于 2007-5-27 12:07:15

Twister Anti-TrojanVirus

显示全部楼层 · 发表于 2007-5-27 12:11:48

原帖由 l784588 于 2007-5-27 11:57 发表
Avast!报了,

显示全部楼层 · 发表于 2007-5-27 12:57:12

Dr.Web
z0.exe;C:\Documents and Settings\Mahaijun\桌面\z0;Trojan.PWS.Lineage;;

显示全部楼层 · 发表于 2007-5-27 13:02:52

?          Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\z0.zip:<ZIP>\z0.exe : infected Trojan-Spy.Win32.BZub.iz
Program execution terminated by user

Directories    : 4    Files in archives:    Files on disks:
Archives:                - total    : 3    - total    : 22
- scanned       : 3    -  scanned : 3    - scanned    : 22
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Startup : 13:02:38 27-05-2007
End       : 13:02:42 27-05-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

[病毒样本] 网马 #4

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源