两个Rootkit！[MD5: 5b1f9d 04d50e]

显示全部楼层 · 发表于 2007-6-26 13:23:34

老了

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\rootkit.zip'
C:\Documents and Settings\Administrator\My Documents\
  rootkit.zip
[0] Archive type: ZIP
--> torn.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.OS.1
      [WARNING] Infected files in archives cannot be repaired!
--> callgate.sys
      [DETECTION] Contains signature of the rootkit RKIT/CallGate.1
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-26 13:25:45

2007/6/26 13:29:10 eAmon file D:\VIRUS\CALLGATE.SYS Win32/PSW.Agent.NFN trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/26 13:29:08 eAmon file D:\VIRUS\TORN.SYS a variant of Win32/Rootkit.Vanti.EE trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

显示全部楼层 · 发表于 2007-6-26 13:26:22

病毒: Trojan-PSW.Win32.OnLineGames.os, Trojan-Downloader.Win32.Small.czl
檔案: rootkit[1].zip
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YEAJUU4N
處理序: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-26 13:27:53

Kaspersky Internet Security 7.0
The requested URL http://uni.kafan.cn/bbs/attachment.php?aid=93222 is infected with Trojan-PSW.Win32.OnLineGames.os virus

显示全部楼层 · 发表于 2007-6-26 13:29:14

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.os 文件: F:\rootkit.zip\torn.sys
已删除: 木马程序 Trojan-Downloader.Win32.Small.czl 文件: F:\rootkit.zip\callgate.sys

两个Rootkit！[MD5: 5b1f9d 04d50e]

本帖子中包含更多资源

监控报