瑞星报壳MD5: 4D871DF5

显示全部楼层 · 发表于 2007-7-19 19:03:15

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/18 08:11:18 (811592 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 831933
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD5.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: F:\v\IsUninst#32.exe
   78 ms F:\v\IsUninst#32.exe                                        Security Risk NSAnti.A ()
- File F:\v\IsUninst#32.exe quarantined.
- File F:\v\IsUninst#32.exe deleted.

===================================================================================================

The scanning started: 2007/07/19 19:03:03
            ended: 2007/07/19 19:03:03
Logged on as       : Administrator
on hostname       : BE29C0E1C4C9406

Scanning results:
Total number of files found..............................:    1
Number of files scanned..................................:    1
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-19 21:05:25

avast报Win32:NSanti-BG [Trj]

显示全部楼层 · 发表于 2007-7-19 23:43:44

AntiVir也报壳。。。

显示全部楼层 · 发表于 2007-7-20 00:15:41

小A显示是木马

显示全部楼层 · 发表于 2007-7-20 08:41:44

除了Dr.Web，都在报壳
至于Ikarus...

显示全部楼层 · 发表于 2007-7-20 08:53:23

NIS 鸽子

显示全部楼层 · 发表于 2007-7-20 09:34:28

微点:
木马名称:Backdoor.Win32.Huigezi.crm

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ISUNINST#32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-7-20 13:16:55

咖啡也抱了

显示全部楼层 · 发表于 2007-7-20 16:57:30

NOD启发
未知 NEW HEUR PE_VIRUS

[病毒样本] 瑞星报壳MD5: 4D871DF5

浏览过的版块