[MD5: 3E2775]

显示全部楼层 · 发表于 2007-6-23 09:40:19

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/12345.exe

detected: Trojan program Trojan.Win32.Agent.ame URL: http://bbs.kafan.cn/attachment.php?aid=91563//12345.exe

[ 本帖最后由 wangjay1980 于 2007-6-24 08:56 编辑 ]

显示全部楼层 · 发表于 2007-6-23 09:41:43

AVAST飘

显示全部楼层 · 发表于 2007-6-23 09:41:51

12345.exe
[DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-6-23 09:43:22

File: 样本.rar
Status:
INFECTED/MALWARE
MD5: e5e05e492e4a52ce5926681349456a04
Packers detected:
-
Bit9 reports: File not found
Scanner results
Scan taken on 23 Jun 2007 01:46:12 (GMT)
A-Squared
Found Backdoor.Win32.HacDef.gr
AntiVir
Found TR/Crypt.Morphine.Gen
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found DeepScan:Generic.Spambot.BXW.7035102F
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing

显示全部楼层 · 发表于 2007-6-23 10:22:17

bd不错，报了！

显示全部楼层 · 发表于 2007-6-23 11:05:48

设置到最高了，我的卡巴7。123为什么不启发啊。。。你的启发了

显示全部楼层 · 发表于 2007-6-23 11:53:05

2楼的卡巴7虽说报了
但是卡6没有报
费尔报壳

显示全部楼层 · 发表于 2007-6-24 06:51:15

Virus: Trojan.Win32.Agent.ame

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-24 07:58:58

運行12345.exe，發現下列行為，被EQ-Secure RC2攔截！

2007-06-24 08:02:20 运行应用程序    操作:允许
进程路径:C:\windows\Explorer.EXE
文件路径:D:\桌面\virus\3E2775\12345.exe
规则:应用程序规则->系統程序->%windir%\Explorer.EXE

2007-06-24 08:02:20 创建文件    操作:阻止
进程路径:D:\桌面\virus\3E2775\12345.exe
文件路径:C:\windows\system32\xowgm.exe
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.exe

2007-06-24 08:02:20 创建文件    操作:阻止
进程路径:D:\桌面\virus\3E2775\12345.exe
文件路径:C:\windows\system32\xowgm.exe
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.exe

2007-06-24 08:02:20 创建文件    操作:阻止
进程路径:D:\桌面\virus\3E2775\12345.exe
文件路径:C:\windows\system32\xowgm.exe
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.exe

2007-06-24 08:02:20 创建文件    操作:阻止
进程路径:D:\桌面\virus\3E2775\12345.exe
文件路径:C:\windows\system32\xowgm.exe
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.exe

1.他會在C:\windows\system32\生成
xowgm.exe

[病毒样本] [MD5: 3E2775]

本帖子中包含更多资源

回复 #2 wangjay1980 的帖子

本帖子中包含更多资源