[MD5: A79C15 0322D2]

显示全部楼层 · 发表于 2007-8-10 12:02:45

--> a.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> vip.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '4729e3b1.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-10 12:04:36

_____________________________________________

         风暴微塔反病毒
                        [内测版]
               http://www.v0day.com/
----------------------------------------------
开始扫描……

[C:\Documents and Settings\Administrator\桌面\新建文件夹 (5)\Tonger2003.zip]
                  …………引擎[2]发现病毒:Win32.Nop ;zg
OK  扫描完毕！

[ 本帖最后由 FBAV 于 2007-8-10 12:06 编辑 ]

显示全部楼层 · 发表于 2007-8-10 12:05:15

微点太棒了，强烈推荐！[:27:]

显示全部楼层 · 发表于 2007-8-10 12:41:09

C:\virus\vip.exe - infected with Trojan.Popwin

显示全部楼层 · 发表于 2007-8-10 12:44:53

显示全部楼层 · 发表于 2007-8-10 12:47:43

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\A.EXE
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DSETUP.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\WINDOWS.0\SYSTEM32\MSKOOS.EXE
是否删除木马程序及其衍生物?程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\A.EXE
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DSETUP.BAT
是否删除可疑程序?
vip WINDOWS无法访问

显示全部楼层 · 发表于 2007-8-10 12:52:12

雨伞报壳
上报~

显示全部楼层 · 发表于 2007-8-10 15:45:42

CA PASS

显示全部楼层 · 发表于 2007-8-10 15:46:07

[病毒样本] [MD5: A79C15 0322D2]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源