ab55de

显示全部楼层 · 发表于 2007-6-24 17:30:56

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\down.rar/down.exe//PE-Armor//PE_Patch.MaskPE

显示全部楼层 · 发表于 2007-6-24 17:34:00

不知道是加的什么壳在里面

显示全部楼层 · 发表于 2007-6-24 17:34:39

g:\virus\temp\down.rar:\down.exe - Signature 'BehavesLikeWin32.ExplorerHijack' found
g:\virus\temp\down.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.250

显示全部楼层 · 发表于 2007-6-24 17:35:05

ess pass上报

显示全部楼层 · 发表于 2007-6-24 17:36:13

Is the Trojan horse TR/Hijack.Explor.3529

显示全部楼层 · 发表于 2007-6-24 17:41:36

斧头监控拦截

显示全部楼层 · 发表于 2007-6-24 17:42:04

什么玩意

显示全部楼层 · 发表于 2007-6-24 17:55:00

?       Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\down.rar:<RAR>\down.exe : infected MalwareScope.Trojan-PSW.Game.14
Program execution terminated by user

Directories    : 4    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 19
- scanned       : 1    -  scanned : 1    - scanned    : 18
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Startup : 17:59:51 24-06-2007
End       : 17:59:57 24-06-2007
Total time : 00:00:06
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-6-24 17:58:51

全不报.

[病毒样本] ab55de

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 #4 allenhippo 的帖子

本帖子中包含更多资源