c5d259

显示全部楼层 · 发表于 2007-7-10 22:03:16

Scan performed at: 2007-7-10 22:03:05
Scanning Log
NOD32 version 2389 (20070710) NT
Command line: C:\Documents and Settings\EQ2\桌面\vip[1].rar
Operating memory - is OK

Date: 10.7.2007 Time: 22:03:11
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\vip[1].rar
C:\Documents and Settings\EQ2\桌面\vip[1].rar ?RAR ?vip[1].exe - a variant of Win32/Butileg virus
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 22:03:12 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-7-10 22:03:55

detected: virus Virus.Win32.AutoRun.eg URL: http://bbs.kafan.cn/attachment.php?aid=99232//vip[1].exe

显示全部楼层 · 发表于 2007-7-10 22:04:20

上报

显示全部楼层 · 发表于 2007-7-10 22:04:37

病毒: Virus.Win32.AutoRun.eg
文件: vip[1][1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QXL8YQ5H
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-10 22:16:20

现在那帮人怎么这么喜欢vip

c:\ABC\vip[1].rar:\vip[1].exe - Signature 'Virus.Win32.AutoRun.eg' found
c:\ABC\vip[1].rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.000

显示全部楼层 · 发表于 2007-7-10 23:10:01

KV2007已经报杀。

显示全部楼层 · 发表于 2007-7-11 00:52:43

scan item: D:\Download\vip[1].rar
File scanned: D:\Download\vip[1].rar - SIGNATURE FOUND "Virus.Win32.AutoRun.eg"

显示全部楼层 · 发表于 2007-7-11 01:00:48

楼主也用的是咖啡，补张图了

显示全部楼层 · 发表于 2007-7-11 01:18:36

红伞启发式通杀!

[病毒样本] c5d259

本帖子中包含更多资源

本帖子中包含更多资源