Trojan.Win32.Killav.an
Payload
When launching, the Trojan scans the system for widnows with the following names and terminates them:
Norton AntiVirus
VirusScan
eSafe Desktop Watch
eTrust EZ AntiVirus
Panda AntiVirus Titanium
PC-Cillin 2002
PC-Cillin 2003
F-Secure Anti-Virus
Sophos AntiVirus
ZoneAlarm
ZoneAlarm Pro
Tiny Personal Firewall
McAfee Firewall
Norton Personal FireWall
The Trojan then ceases running.

这是全部payload,如果不是分析人员太懒,那么这个Trojan就是我见过的最胆小的一个,如此胆小如鼠,简直有辱Trojan家族名誉.可怜的国产杀毒软件就这样被无视了

Comments (0)

Related Posts Plugin for WordPress, Blogger...