2个（一个鸽子一个盗Q）[MD5: D81539 29296C]

显示全部楼层 · 发表于 2007-7-27 17:25:30

金山报1个,费尔启发报2个壳

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.328\AA.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\HACKER.COM.CN.EXE
是否删除木马程序及其衍生物?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX02.250\AA.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.328\AA.EXE
木马程序生成以下文件:
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX02.250\MM.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\VK5Q.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\H.SYS
是否删除木马程序及其衍生物?

怎么这么东西啊

显示全部楼层 · 发表于 2007-7-27 17:30:49

原帖由 EQ2 于 2007-7-27 17:00 发表
nod32 miss。。。。。。全都能运行？？？

看来你对自己的杀软很是没有信心啊，哈哈。

显示全部楼层 · 发表于 2007-7-27 17:36:54

1 个晕

显示全部楼层 · 发表于 2007-7-27 17:44:37

C:\Documents and Settings\Administrator\桌面\a.ra
r>>aa.exe
Backdoor.Gpigeon.GEN
C:\Documents and Settings\Administrator\桌面\a.ra
r>>mm.exe>>mian007
Packer.Mian007
全灭

显示全部楼层 · 发表于 2007-7-27 17:52:45

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Packer.Malware.NSAnti.H

显示全部楼层 · 发表于 2007-7-27 17:57:56

显示全部楼层 · 发表于 2007-7-27 17:59:34

egin scan in 'D:\a.rar'
D:\a.rar
  [0] Archive type: RAR
  --> aa.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> mm.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-27 19:32:58

fscs pass

显示全部楼层 · 发表于 2007-7-27 19:42:04

这样

显示全部楼层 · 发表于 2007-7-27 20:53:58

F:\a.rar:<RAR>\mm.exe : infected MalwareScope.Worm.Viking.3

[病毒样本] 2个（一个鸽子一个盗Q）[MD5: D81539 29296C]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源