简单过NOD32 [MD5: F0682B]

显示全部楼层 · 发表于 2007-6-27 11:50:21

病毒: Trojan.Win32.StartPage.aak
檔案: 样本[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YEAJUU4N
處理序: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-27 11:50:57

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
[0] Archive type: RAR
--> update_origina.EXE
      [DETECTION] Is the Trojan horse TR/Copiet.B.1
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-27 11:51:33

咖啡杀了，看报出结果好象是会劫持主页之类的？

显示全部楼层 · 发表于 2007-6-27 11:54:26

avast灭之,报Win32:Small-EVZ [Trj]

显示全部楼层 · 发表于 2007-6-27 11:57:05

怎么简单法？

显示全部楼层 · 发表于 2007-6-27 11:59:37

[Scan path] C:\Documents and Settings\Administrator\桌面\样本.rar
>>>C:\Documents and Settings\Administrator\桌面\样本.rar\update_origina.EXE infected with Trojan.PWS.Hangame
C:\Documents and Settings\Administrator\桌面\样本.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 24 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-6-27 12:15:46

detected: Trojan program Trojan.Win32.StartPage.aak URL: http://bbs.kafan.cn/attachment.p ... XE//ExeStealth//UPX

显示全部楼层 · 发表于 2007-6-27 19:16:03

ess pass上报

[病毒样本] 简单过NOD32 [MD5: F0682B]

本帖子中包含更多资源

本帖子中包含更多资源