刚才那个下载者下载的病毒【4B03C2】

woai_jolin

原帖：http://bbs.kafan.cn/viewthread.php?tid=112526&extra=page%3D1

欠妳緈諨

LS灌水

微点卫士

2楼故意灌水

金山挂,费尔启发报壳

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\COMMOND.PIF
2) C:\WINDOWS.0\SYSTEM32\SVCH0ST.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1.EXE
木马程序生成以下文件:
是否删除木马程序及其衍生物?

并且跳出来影子系统计划关机时间的对话框

红心王子

不杀

上报

woai_jolin

FSCS PASS
2007/7/27 20:43:14        Scanning Log
2007/7/27 20:43:14        Version of virus signature database: 2425 (20070727)
2007/7/27 20:43:14        Date: 27.7.2007  Time: 20:43:14
2007/7/27 20:43:14        Scanned disks, folders and files: F:\v\1.zip
2007/7/27 20:43:15        F:\v\1.zip - probably unknown NewHeur_PE virus [7] - deleted - quarantined
2007/7/27 20:43:15        F:\v\1.zip » ZIP » 1.exe - probably unknown NewHeur_PE virus [7]
2007/7/27 20:43:15        Number of scanned files: 2
2007/7/27 20:43:15        Number of threats found: 1
2007/7/27 20:43:15        Time of completion: 20:43:15  Total scanning time: 1 sec (00:00:01)
2007/7/27 20:43:15        Notes:
2007/7/27 20:43:15        [7] File is probably infected with an unknown virus.

mingwang69

sav没报…………

taitan001

F:\1.zip:<ZIP>\1.exe : infected MalwareScope.Trojan-PSW.Game.13

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Trojan.PWS.QQPass.NBP

Nerazzurri

nod

Scan performed at: 2007-7-27 21:57:11
Scanning Log
NOD32 version 2425 (20070727) NT
Command line: C:\Documents and Settings\Kevin\Desktop\病毒样本\1.zip

Date: 27.7.2007  Time: 21:57:13
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Kevin\Desktop\病毒样本\1.zip
C:\Documents and Settings\Kevin\Desktop\病毒样本\1.zip ?ZIP ?1.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 1
Number of threats found: 1
Time of completion: 21:57:13 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.
________
avira

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Kevin\Desktop\病毒样本\1.zip'
C:\Documents and Settings\Kevin\Desktop\病毒样本\1.zip
  [0] Archive type: ZIP
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Agent.48128.8
      [INFO]      The file was deleted!

taitan001

F:\1.zip:<ZIP>\1.exe : infected MalwareScope.Trojan-PSW.Game.13