[MD5: 3927C1]lovely trojandownloader

显示全部楼层 · 发表于 2007-6-15 15:32:53

haha

显示全部楼层 · 发表于 2007-6-15 15:37:03

咖啡过

显示全部楼层 · 发表于 2007-6-15 15:38:51

红伞秒之

显示全部楼层 · 发表于 2007-6-15 15:41:13

avast avg 飘过

显示全部楼层 · 发表于 2007-6-15 15:43:19

The requested URL http://bbs.kafan.cn/attachment.php?aid=87722 is infected with Trojan-Downloader.HTA.Agent.l virus

显示全部楼层 · 发表于 2007-6-15 16:06:29

病毒: Trojan-Downloader.HTA.Agent.l

Virus beim Laden von Web-Inhalten gefunden.

Adresse: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-15 16:10:01

这个见过，好像是写进启动项的，然后卡巴删除了，重启之后又会生成？（求助区看到的）

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-14
Start time: 2007-6-15 16:10
Engine(s): KAV engine (AVK 17.5379), BD-Engine (AVKB 17.255)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: Server.hta
In archive: C:\Documents and Settings\Administrator\桌面\Server.rar
Status: Virus detected
Virus: Trojan-Downloader.HTA.Agent.l (KAV engine)
Object: Server.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: Trojan-Downloader.HTA.Agent.l (KAV engine)
Analysis complete: 2007-6-15 16:11
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-6-15 17:33:30

Virus: Trojan-Downloader.HTA.Agent.l

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-15 18:09:21

有点叫人无语的东西

调动IE浏览到http://y66.us/oKK/Url2.html，然后下载http://y66.us/oKK/smss1.exe
这样的“下载者”也有... 真的是什么手段都搬出来了

瑞星再次绿伞变红伞

显示全部楼层 · 发表于 2007-6-15 18:11:19

nod过

[MD5: 3927C1]lovely trojandownloader

本帖子中包含更多资源