168跟新【dde3cb】

wangjay1980

[ 本帖最后由 wangjay1980 于 2007-7-22 09:06 编辑 ]

红心王子

不杀 上报

红心王子

报出来的不多啊

Scan taken on 22 Jul 2007 01:02:11 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Autorun.BK
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found Win32.HLLW.Autoruner.175
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found a variant of Win32/PSW.OnLineGames.NBR
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Trojan-PSW.Game.18 (paranoid heuristics) (probable variant)

[ 本帖最后由 红心王子 于 2007-7-22 09:04 编辑 ]

woai_jolin

2007/7/22 9:04:39        Scanning Log
2007/7/22 9:04:39        Version of virus signature database: 2411 (20070721)
2007/7/22 9:04:39        Date: 22.7.2007  Time: 09:04:39
2007/7/22 9:04:39        Scanned disks, folders and files: F:\v\
2007/7/22 9:04:40        F:\v\s168.zip - a variant of Win32/PSW.OnLineGames.NBR trojan - deleted - quarantined
2007/7/22 9:04:40        F:\v\s168.zip » ZIP » s168.exe - a variant of Win32/PSW.OnLineGames.NBR trojan
2007/7/22 9:04:41        Number of scanned files: 2
2007/7/22 9:04:41        Number of threats found: 1
2007/7/22 9:04:41        Time of completion: 09:04:41  Total scanning time: 2 sec (00:00:02)

微点卫士

金山挂！
微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\S168.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.DLL
3) C:\PROGRAM FILES\COMMON FILES\RELIVE.DLL
是否删除木马程序及其衍生物?

quansen83

Begin scan in 'C:\Documents and Settings\Administrator\桌面\s168.zip'
C:\Documents and Settings\Administrator\桌面\s168.zip
  [0] Archive type: ZIP
  --> s168.exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
      [INFO]      The file was deleted!

胡同文化

微点似乎漏了点衍生物，5楼小心哦

残缺的唯美

晕阿 咖啡今天全部飘过

微点卫士

啊？？？？？？？？？
什么衍生物？

微点卫士

微点：
木马名称:未知间谍软件

程序:
C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?‘
木马名称:未知间谍软件

程序:
C:\PROGRAM FILES\COMMON FILES\RELIVE.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.047\S168.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.BAK
是否删除木马程序及其衍生物?


还是这么点诶，漏了哪些？