无聊小毒，烦不烦啊[MD5: D13AC0 E709CB]

显示全部楼层 · 发表于 2007-6-26 07:42:19

天天骚扰卡巴

貌似下载木马的地址58.211.7.XX没有反应了

[ 本帖最后由 allenhippo 于 2007-6-26 07:55 编辑 ]

显示全部楼层 · 发表于 2007-6-26 08:39:04

骚扰吧，也是一种幸福

显示全部楼层 · 发表于 2007-6-26 09:56:24

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus.rar'
C:\Documents and Settings\Administrator\My Documents\
  virus.rar
[0] Archive type: RAR
--> my_70032.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> my_70042.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-26 10:12:58

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-24
Start time: 2007-6-26 10:16
Engine(s): KAV engine (AVK 17.5622), BD-Engine (AVKB 17.273)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: my_70032.exe
In archive: C:\Documents and Settings\Administrator\桌面\virus.rar
Status: Virus detected
Virus: Win32:Qqhelper-AP [Trj] (AVAST-Engine)
Object: virus.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: Win32:Qqhelper-AP [Trj] (AVAST-Engine)
Analysis complete: 2007-6-26 10:16
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-6-26 10:59:33

avast拦截了,报Win32:Qqhelper-AP [Trj].

显示全部楼层 · 发表于 2007-6-26 11:04:30

my_70032.exek, my_70042.exek - Trojan-Downloader.Win32.Small.evi

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2007-6-26 12:18:16

deleted: Trojan program Trojan-Downloader.Win32.Small.evi File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/my_70032.exe
deleted: Trojan program Trojan-Downloader.Win32.Small.evi File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/my_70042.exe

显示全部楼层 · 发表于 2007-6-26 12:20:44

卡巴的升级真是有抽死他的冲动。。

显示全部楼层 · 发表于 2007-6-26 12:22:07

显示全部楼层 · 发表于 2007-6-26 12:22:29

我记得wangjay1980的启发和我的启发报病毒名不一样是怎么回事

[病毒样本] 无聊小毒，烦不烦啊[MD5: D13AC0 E709CB]

本帖子中包含更多资源

本帖子中包含更多资源