别人给的蠕虫[MD5: AD027B]

显示全部楼层 · 发表于 2007-6-27 13:19:09

avast pass!

dr.web : win32.HLLM.Limar.based

显示全部楼层 · 发表于 2007-6-27 17:25:15

[0] Archive type: RAR
  --> access.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
   [INFO]    A backup was created as '46e52ec9.qua'  ( QUARANTINE )
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-27 17:28:36

sy miss

显示全部楼层 · 发表于 2007-6-27 21:44:39

Virus: Email-Worm.Win32.Warezov.pk

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-28 10:51:30

Micropoint Proactive Defense Software  Pre-update
Program version: 1.2.10570.0156
Characteristic base: 1.6.366.070627
Update time: 2007-06-27 16:57:31

All rights reserved (C) 2005-2007 Micropoint Corporation

Beijing Eastern Micropoint Info-Tech CO., LTD.
Fujian Eastern Micropoint Info-Secu CO., LTD.

Email: support@micropoint.com.cn
Web Site: http://www.micropoint.com.cn

Time KEY Name Original value New value Creator
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ ASYNCHRONOUS D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ IMPERSONATE D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ SHUTDOWN  WLXSHUTDOWNEVENT D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ STARTUP  WLXSTARTUPEVENT D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ DLLNAME  C:\WINDOWS\SYSTEM32\DXMADINP.DLL D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ ASYNCHRONOUS D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ IMPERSONATE D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ SHUTDOWN  WLXSHUTDOWNEVENT D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ STARTUP  WLXSTARTUPEVENT D:\TEMP\~6D.TMP
2007-06-28 10:46:59 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\DXMADINP\ DLLNAME  C:\WINDOWS\SYSTEM32\DXMADINP.DLL D:\TEMP\~6D.TMP

[ 本帖最后由 Nblock 于 2007-6-28 10:55 编辑 ]

显示全部楼层 · 发表于 2007-6-28 12:26:54

nis过

显示全部楼层 · 发表于 2007-6-28 16:39:20

金山毒霸飘过

显示全部楼层 · 发表于 2007-6-28 17:07:05

红伞报

显示全部楼层 · 发表于 2007-6-28 17:23:37

瑞星杀

[病毒样本] 别人给的蠕虫[MD5: AD027B]

本帖子中包含更多资源