毒网挂的马及生成物

显示全部楼层 · 发表于 2007-7-3 13:16:07

太多东西，md5就不算了

显示全部楼层 · 发表于 2007-7-3 13:19:20

狮子咬死3个

显示全部楼层 · 发表于 2007-7-3 13:19:54

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\0627xh.rar'
C:\Documents and Settings\Administrator\My Documents\
  0627xh.rar
[0] Archive type: RAR
--> 0627xh.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lineage.UZH.27
      [WARNING] Infected files in archives cannot be repaired!
--> ¥Í¦¨ª«\drive\C\windows\SbiePst.dat
--> ¥Í¦¨ª«\drive\C\windows\Web\printers\images\drcerwq.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> ¥Í¦¨ª«\drive\C\windows\Web\printers\images\drcerwq.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lineage.UZH.27
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-3 13:20:41

你应该把SbiePst.dat处理掉，根本就不是病毒

显示全部楼层 · 发表于 2007-7-3 13:20:43

文件 C:\Documents and Settings\starfish\桌面\0627xh.rar 受到 Win32/PSW.Lineage.DN 木马的变种感染. 可以删除文件.强烈建议您在删除前备份所有重要数据.
NOD的结果

显示全部楼层 · 发表于 2007-7-3 13:37:21

KIS 7
已经删除: 木马程序 Trojan-PSW.Win32.Magania.my 文件: D:\Downloads\0627xh.rar/0627xh.exe//PE_Patch.PECompact//PecBundle//PECompact
已经删除: 木马程序 Trojan-PSW.Win32.Magania.my 文件: D:\Downloads\0627xh.rar/ネΘ?\drive\C\windows\Web\printers\images\drcerwq.dll
已经删除: 木马程序 Trojan-PSW.Win32.Magania.my 文件: D:\Downloads\0627xh.rar/ネΘ?\drive\C\windows\Web\printers\images\drcerwq.exe//PE_Patch.PECompact//PecBundle//PECompact

显示全部楼层 · 发表于 2007-7-3 13:43:35

显示全部楼层 · 发表于 2007-7-3 13:55:48

微点砍掉

显示全部楼层 · 发表于 2007-7-3 14:02:59

病毒: Trojan-PSW.Win32.Magania.my (3x)
文件: 0627xh[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\WAW7BC7B
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-3 14:24:48

deleted: Trojan program Trojan-PSW.Win32.Magania.my File: C:\Documents and Settings\Owner\×ÀÃæ\0627xh.rar/0627xh.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: Trojan program Trojan-PSW.Win32.Magania.my File: C:\Documents and Settings\Owner\×ÀÃæ\0627xh.rar/¥Í¦¨ª«\drive\C\windows\Web\printers\images\drcerwq.dll
deleted: Trojan program Trojan-PSW.Win32.Magania.my File: C:\Documents and Settings\Owner\×ÀÃæ\0627xh.rar/¥Í¦¨ª«\drive\C\windows\Web\printers\images\drcerwq.exe//PE_Patch.PECompact//PecBundle//PECompact

[病毒样本] 毒网挂的马及生成物

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块