在过avp...[MD5: B796BD]

显示全部楼层 · 发表于 2007-7-12 23:47:03

应该是 arp 病毒，前些时候见过它在我学校的校园网出现，欺骗整个Len...没有打补丁的全部死...
这个可能是变种，过 avp ...

显示全部楼层 · 发表于 2007-7-12 23:48:18

D:\download\t3\样本.rar:\pagefile.pif - Signature 'Trojan-Downloader.Win32.Small.esr' found
D:\download\t3\样本.rar

2 Files scanned
(1 Archive with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.050

显示全部楼层 · 发表于 2007-7-12 23:48:28

yiban

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/pagefile.pif

显示全部楼层 · 发表于 2007-7-12 23:49:10

原帖由 jimmyleo 于 2007-7-12 23:48 发表
   2 Files scanned
      (1 Archive with 1 file)
      1 Signature found
      0 Suspect code-parts found
      Used time: 0:00.050

嘿嘿我帮他修正了~

显示全部楼层 · 发表于 2007-7-12 23:50:17

[0] Archive type: RAR
--> pagefile.pif
[DETECTION] Contains suspicious code HEUR/Malware

显示全部楼层 · 发表于 2007-7-12 23:53:24

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Win32.Agent.yw

用户来源：互联网

软件版本：19.31.32

最后回复一个，睡觉

显示全部楼层 · 发表于 2007-7-12 23:54:10

Scan performed at: 2007-7-12 23:53:58
Scanning Log
NOD32 version 2395 (20070712) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 12.7.2007 Time: 23:54:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?pagefile.pif - probably a variant of Win32/Genetik trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 23:54:06 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-13 00:01:31

咖啡挂。。

显示全部楼层 · 发表于 2007-7-13 00:02:52

KV2007和驱逐舰已经报杀。

显示全部楼层 · 发表于 2007-7-13 00:05:15

[Scan path] C:\Documents and Settings\Administrator\桌面\样本.rar
>>C:\Documents and Settings\Administrator\桌面\样本.rar\pagefile.pif probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\桌面\样本.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 1
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 25 Kb/s
Scan time: 00:00:00

[病毒样本] 在过avp...[MD5: B796BD]

本帖子中包含更多资源