[MD5: 4020D3]

显示全部楼层 · 发表于 2007-7-25 23:13:13

Scan performed at: 2007-7-25 23:12:57
Scanning Log
NOD32 version 2418 (20070725) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 25.7.2007 Time: 23:13:04
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?vip.exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 23:13:04 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-25 23:13:55

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=105047 is infected with Trojan.Generic virus

显示全部楼层 · 发表于 2007-7-25 23:14:11

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=105047 is infected with Trojan.Generic virus

显示全部楼层 · 发表于 2007-7-25 23:14:28

显示全部楼层 · 发表于 2007-7-25 23:15:07

金山挂,费尔启发报壳

微点:
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.203\VIP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-7-25 23:23:16

F:\样本.rar:<RAR>\vip.exe : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)

显示全部楼层 · 发表于 2007-7-26 06:07:12

不杀上报

显示全部楼层 · 发表于 2007-7-26 06:48:00

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=105047 is infected with Trojan.Generic virus

显示全部楼层 · 发表于 2007-7-26 06:52:16

[0] Archive type: RAR
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    A backup was created as '46d6d410.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

[病毒样本] [MD5: 4020D3]

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块