[MD5: 18B983] 接招

红心王子

Scan taken on 26 Jul 2007 01:40:57 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found Win32:Fujack-Z
AVG Antivirus	Found Worm/Generic.CJS
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found BackDoor.Pigeon.1604
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found a variant of Win32/AutoRun.K
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found Mal/Packer
VirusBuster	Found Packed/NSPack
VBA32	Found nothing

tracydk

熊猫

微点卫士

金山报一个,费尔启发报壳

微点:
木马起生成的木马

程序:
C:\WINDOWS.0\SYSTEM32\REG.EXE
修改注册表项:
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
是否阻止?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVER.EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SVSH0ST.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVER.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\WINDOWS.0\SYSTEM32\SVSH0ST.EXE
由
C:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\UPX.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVER.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVER.EXE
4) C:\WINDOWS.0\SYSTEM32\SVSH0ST.EXE
5) C:\LCG.EXE
6) D:\LCG.EXE
7) C:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
C:\LCG.EXE

是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX01.094\DIE.EXE
木马程序生成以下文件:
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVER.EXE
可疑程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVER.BAT
是否删除可疑程序?
好多

woai_jolin

FSCS PASS上报

tracydk

报什么的都有,这是什么东西呢

红心王子

一个连接网马的客户端