readme.exe[MD5: dd4de2]

显示全部楼层 · 发表于 2007-6-30 16:24:05

BD挂了

显示全部楼层 · 发表于 2007-6-30 16:25:54

Scan performed at: 2007-6-30 16:25:46
Scanning Log
NOD32 version 2365 (20070630) NT
Command line: C:\Documents and Settings\EQ2\桌面\readme.rar
Operating memory - is OK

Date: 30.6.2007 Time: 16:25:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\readme.rar
C:\Documents and Settings\EQ2\桌面\readme.rar ?RAR ?readme.exe - probably a variant of Win32/PSW.Agent.I trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:25:50 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-6-30 16:27:43

病毒: Trojan-PSW.Win32.Lmir.agw
文件: readme[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-30 16:33:45

http://bbs.kafan.cn/attachment.php?aid=94894\readme.exe\[ACProtect]\[Embedded#09000] [L] Win32:Agent-IR [Trj] (0)

显示全部楼层 · 发表于 2007-6-30 21:36:12

avast灭之,报Win32:Agent-IR [Trj].

显示全部楼层 · 发表于 2007-6-30 21:42:19

[Scan path] C:\Documents and Settings\Administrator\桌面\readme.rar
>C:\Documents and Settings\Administrator\桌面\readme.rar\readme.exe infected with Trojan.PWS.Xinkey
C:\Documents and Settings\Administrator\桌面\readme.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 266 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-6-30 23:34:51

这样报的，偶手动防御了！

显示全部楼层 · 发表于 2007-7-1 00:34:25

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\readme.rar'
C:\Documents and Settings\Administrator\My Documents\
  readme.rar
[0] Archive type: RAR
--> readme.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-1 00:38:27

为什么红伞那么多的病毒库还要启发……
m解释一下，让小弟认识认识……

显示全部楼层 · 发表于 2007-7-1 02:05:21

deleted: Trojan program Trojan-PSW.Win32.Lmir.agw File: E:\virus sample\readme.rar/readme.exe//PE_Patch.UltraProtect//UltraProtect

[病毒样本] readme.exe[MD5: dd4de2]

本帖子中包含更多资源

avast!

本帖子中包含更多资源