[13AE3F]

显示全部楼层 · 发表于 2007-7-22 16:57:20

速度

显示全部楼层 · 发表于 2007-7-22 17:01:12

好像我的sav还没失手过

显示全部楼层 · 发表于 2007-7-22 17:04:29

avast终于报了 Win32:Autorun-U

显示全部楼层 · 发表于 2007-7-22 17:05:44

金山挂！
微点：

木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.391\S168.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-7-22 17:11:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\S168.zip'
C:\Documents and Settings\Administrator\桌面\
  S168.zip
[0] Archive type: ZIP
--> S168.exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46d91f69.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-22 17:38:24

S168.zip\S168.exe;D:\Documents and Settings\dell\桌面\S168.zip;Win32.HLLW.Autoruner.175;;
S168.zip;D:\Documents and Settings\dell\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-7-22 17:39:31

恭喜咖啡再次不报

显示全部楼层 · 发表于 2007-7-22 17:58:09

今天刚更新的

显示全部楼层 · 发表于 2007-7-22 18:58:16

可以拦截全局钩子，可是不会显示是用哪个库文件来挂钩子

[病毒样本] [13AE3F]

本帖子中包含更多资源

回复 #4 l784588 的帖子

本帖子中包含更多资源