3个[MD5: 42845D 468E3A F4B9AE]

显示全部楼层 · 发表于 2007-7-24 12:30:04

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.AskTao.y

用户来源：互联网

软件版本：19.33.10

显示全部楼层 · 发表于 2007-7-24 12:32:02

卡巴下载前报告了

显示全部楼层 · 发表于 2007-7-24 12:34:33

金山2个
费尔3个

微点:
木马名称:Trojan-Spy.Win32.Delf.cor

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.gso

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\18.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SEVICES.EXE
2) C:\WINDOWS.0\SYSTEM32\PACKET.DLL
3) C:\WINDOWS.0\SYSTEM32\WANPACKET.DLL
4) C:\WINDOWS.0\SYSTEM32\WPCAP.DLL
5) C:\WINDOWS.0\SYSTEM32\MSFEED.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-7-24 12:41:21

Scan performed at: 2007-7-24 12:42:37
Scanning Log
NOD32 version 2415 (20070723) NT
Command line: C:\Documents and Settings\Administrator\桌面\样本.rar

Date: 24.7.2007 Time: 12:42:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\样本.rar
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?16.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?17.exe - Win32/PSW.OnLineGames.NDA trojan
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?18.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
Number of scanned files: 3
Number of threats found: 3
Time of completion: 12:42:46 Total scanning time: 6 sec (00:00:06)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-7-24 14:14:58

检测到病毒: Trojan.Win32.Agent.ata, Trojan-Spy.Win32.Delf.uv (2x)
文件: 样本[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-24 14:55:30

显示全部楼层 · 发表于 2007-7-24 15:21:36

Begin scan in 'F:\bingdu\样本.rar'
F:\bingdu\样本.rar
  [0] Archive type: RAR
  --> 16.exe
   [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.2
  --> 17.exe
   [DETECTION] Is the Trojan horse TR/Hook.Shell.152
  --> 18.exe
   [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.25
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-24 16:42:25

原帖由 liaoying112 于 2007-7-24 12:32 发表
卡巴下载前报告了

下不了

显示全部楼层 · 发表于 2007-7-24 17:00:45

NOD32杀了,报一个未知

[病毒样本] 3个[MD5: 42845D 468E3A F4B9AE]

本帖子中包含更多资源

本帖子中包含更多资源