[卡巴,nod32,费尔不报]隔一段时间弹个算卦的网页...

显示全部楼层 · 发表于 2007-7-15 16:01:17

不知道什么时候中的，

隔一段时间弹个算卦的网页

藏在 system32里，还有driver 里也有。

删了，一会儿又有

卡巴扫不出来

郁闷死了

[ 本帖最后由 conanca 于 2007-7-15 16:24 编辑 ]

显示全部楼层 · 发表于 2007-7-15 16:03:14

酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /n.../af+ /fd+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
...o.exe : is suspected of MalwareScope.Trojan-PSW.Game.16 (paranoid heuristics)
...r.exe : is suspected of MalwareScope.Trojan-PSW.Game.16 (paranoid heuristics)
Program execution terminated by user

Directories    : 5    Files in archives:    Files on disks:
Archives:                - total    : 0    - total    : 7
- scanned       : 0    -  scanned : 0    - scanned    : 6
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 0    - suspicious  : 2

Startup : 16:03:03 15-07-2007
End       : 16:03:08 15-07-2007
Total time : 00:00:05
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-7-15 16:05:10

nod pass

显示全部楼层 · 发表于 2007-7-15 16:05:24

微点报未知木马

显示全部楼层 · 发表于 2007-7-15 16:20:17

费尔过。

显示全部楼层 · 发表于 2007-7-15 16:20:41

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\B64X7CKM\d[1].rar\d\Micnbio.exe - probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\B64X7CKM\d[1].rar\d\misser.exe - probably infected with DLOADER.Trojan

Archive contains 2 infected items

显示全部楼层 · 发表于 2007-7-15 16:21:45

NOD 也不报～～～

唉，打击我啊！

显示全部楼层 · 发表于 2007-7-15 16:36:51

nod和avast都不报啊。

显示全部楼层 · 发表于 2007-7-15 16:46:05

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\d.rar'
C:\Documents and Settings\Administrator\桌面\
  d.rar
[0] Archive type: RAR
--> d\Micnbio.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> d\misser.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '470bdee3.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-15 16:51:16

[病毒样本] [卡巴,nod32,费尔不报]隔一段时间弹个算卦的网页...

本帖子中包含更多资源

Norton挂

本帖子中包含更多资源