[B934D7]

显示全部楼层 · 发表于 2007-7-24 12:32:54

貌似小红伞报了一个。。
Starting the file scan:

Begin scan in 'D:\Personal\Desktop\S168.rar'
D:\Personal\Desktop\S168.rar
  [0] Archive type: RAR
  --> S168.exe
   [DETECTION] Is the Trojan horse TR/Autorun.BK
   [INFO]    The file was deleted!

End of the scan: 2007年7月24日  12:32
Used time: 00:08 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-7-24 12:37:11

金山,费尔全挂!!!

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\S168.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.DLL
3) C:\PROGRAM FILES\COMMON FILES\RELIVE.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-7-24 12:39:33

NOD

C:\Documents and Settings\Administrator\桌面\S168.rar »RAR »S168.exe - a variant of Win32/PSW.OnLineGames.NBR trojan

显示全部楼层 · 发表于 2007-7-24 12:41:02

S168.rar\S168.exe;D:\Documents and Settings\dell\桌面\S168.rar;Win32.HLLW.Autoruner.175;;
S168.rar;D:\Documents and Settings\dell\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-7-24 12:43:03

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=104441 is infected with Virus.Win32.AutoRun.bk virus

显示全部楼层 · 发表于 2007-7-24 12:43:31

搞定..

显示全部楼层 · 发表于 2007-7-24 12:59:19

Scan taken on 24 Jul 2007 04:55:22 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Autorun.BK
ArcaVir	Found nothing
Avast	Found Win32:Autorun-U
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Autorun.EX
ClamAV	Found Trojan.Autorun-9
CPsecure	Found nothing
Dr.Web	Found Win32.HLLW.Autoruner.175
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Virus.Win32.AutoRun.bk
Fortinet	Found nothing
Kaspersky Anti-Virus	Found Virus.Win32.AutoRun.bk
NOD32	Found a variant of Win32/PSW.OnLineGames.NBR
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Trojan-PSW.Game.18 (paranoid heuristics) (probable variant)

显示全部楼层 · 发表于 2007-7-24 13:23:51

病毒: Virus.Win32.AutoRun.bk
文件: S168[1].rar
目录: C:\Documents and Settings\Administrator\Application Data\Sandbox\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-24 13:43:43

S168.rar\S168.exe;E:\测试\S168.rar;Win32.HLLW.Autoruner.175;;
S168.rar;E:\测试;档案文件已被病毒感染;已删除.;

[病毒样本] [B934D7]

本帖子中包含更多资源

DR

本帖子中包含更多资源

浏览过的版块