小红伞过，360报木马

显示全部楼层 · 发表于 2007-6-25 11:17:56

小红要高启发才报，默认中启发不报得

g:\virtualshare\temp\lessos.exe - Signature 'Trojan-PWS.Win32.Delf.sd' found

1 File scanned
(0 Archives with 0 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.437

显示全部楼层 · 发表于 2007-6-25 12:10:33

扫描开始时间: 2007-6-25 12:15:02
扫描日志
NOD32 版本 2350 (20070624) NT
命令行: D:\firefox下载的文件\???lessos.rar
C:\Program Files\Eset\nod32.exe<病毒 - 正常>

日期: 2007年6月25日时间: 12:15:05
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: D:\firefox下载的文件\???lessos.rar
D:\firefox下载的文件\???lessos.rar ?RAR ?lessos.exe ?UPX v12_m2_patch<病毒 - 正常>
已扫描文件数量: 1
已发现病毒数量: 0
完成时间: 12:15:05 总共扫描时间: 0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-6-25 12:30:45

小红伞报了
BD也报

显示全部楼层 · 发表于 2007-6-25 15:50:35

卡巴报了

已删除: 木马程序 Trojan-Spy.Win32.Agent.qn 文件: C:\Documents and Settings\Administrator\桌面\复件木马lessos.rar/lessos.exe//UPX

[ 本帖最后由 xiaosdsd 于 2007-6-25 15:54 编辑 ]

显示全部楼层 · 发表于 2007-6-25 15:56:59

已检测到: 木马程序 Trojan-Spy.Win32.Agent.qn URL: http://bbs.kafan.cn/attachment.php?aid=92642//lessos.exe//UPX

显示全部楼层 · 发表于 2007-6-25 16:42:35

Start of the scan: 2007年6月25日  16:47

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\木马lessos.rar'
C:\Documents and Settings\Administrator\桌面\木马lessos.rar
  [0] Archive type: RAR
  --> lessos.exe
   [DETECTION] Is the Trojan horse TR/Spy.Agent.QN.18
   [INFO]    The file was moved to '46ec1ba7.qua'!

End of the scan: 2007年6月25日  16:47
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-6-25 17:01:38

?       Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\...\lessos.exe : is suspected of Trojan-PSW.Game.4 (paranoid heuristics)
Program execution terminated by user

Directories    : 3    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 6
- scanned       : 1    -  scanned : 1    - scanned    : 6
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 1    - suspicious  : 1

Startup : 17:06:48 25-06-2007
End       : 17:06:51 25-06-2007
Total time : 00:00:03
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-6-25 17:04:14

病毒: Trojan-Spy.Win32.Agent.qn
檔案: 木马lessos[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YEAJUU4N
處理序: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-25 17:44:53

微点解压缩报已知木马！！

显示全部楼层 · 发表于 2007-6-25 17:55:11

费尔报了，呵呵

小红伞过，360报木马

报壳了

本帖子中包含更多资源

本帖子中包含更多资源