91af66

显示全部楼层 · 发表于 2007-8-15 02:15:24

这个页面将显示安全盾阻止的文件和进程，如果你想手动配置你的安全设置，请先认真阅读设置说明。
每改动或新增一项设置，请随时查看本页面是否阻止了你的正常程序。
如果你对网上下载的某个程序不放心，你可以先试安装，安装后程序运行如果有问题，可以采用“不信任程序安装”模式。
该模式在工作中会对有可能的木马启动项及文件弹出提示是否继续安装。而如果安装某个确信没有问题的程序后失败(比如硬
件驱动或微软补丁)，可以使用“信任程序安装”模式。
首次运行安全盾请检查监控设置页的网页监视是否自动侦测到您的浏览器,如果没有请手动添加您的浏览器。
C:\WINDOWS\system32\max1d1164v.exe 2007-08-15 02:13:42

显示全部楼层 · 发表于 2007-8-15 02:19:54

详情
0C 正尝试连入因特网。您可阻止或允许该请求。做什么？

定位
D:\病毒库\0C\0C.EXE

显示全部楼层 · 发表于 2007-8-15 03:09:03

TrustPort Antivirus PASS~~~~NOD32過不了

显示全部楼层 · 发表于 2007-8-15 03:10:56

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\0C.rar'
C:\Documents and Settings\Administrator\桌面\0C.rar
  [0] Archive type: RAR
  --> 0C.exe
   [DETECTION] Contains code of the Windows virus W32/Virut.P
   [INFO]    The file was moved to '46effe94.qua'!

End of the scan: 2007年8月15日  03:11
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-15 03:27:32

Scan performed at: 2007-8-15 3:27:24
Scanning Log
NOD32 version 2460 (20070814) NT
Command line: C:\Documents and Settings\EQ2\桌面\0C.rar
Operating memory - is OK

Date: 15.8.2007 Time: 03:27:30
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\0C.rar
C:\Documents and Settings\EQ2\桌面\0C.rar ?RAR ?0C.exe - Win32/Virut.NAI virus - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 03:27:30 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-8-15 09:16:14

微点：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0C.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:1485
远端地址:85.255.114.164(乌克兰)
远端端口:80
挂了，上报

显示全部楼层 · 发表于 2007-8-15 09:33:40

显示全部楼层 · 发表于 2007-8-15 09:39:26

[:26:] Start of the scan: 2007年8月15日  09:38

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\0C.rar
  [0] Archive type: RAR
  --> 0C.exe
   [DETECTION] Contains code of the Windows virus W32/Virut.P
   [INFO]    The file was deleted!

End of the scan: 2007年8月15日  09:38
Used time: 00:13 min

The scan has been done completely.

   1 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-15 10:25:36

这个病毒不知道是不是误报,出现个错误的对话框,我点确定,它就自动把我机器重新启动了...
而且在重新启动之前,截面变成WIN2000的截面...
现在我上报卡巴确认一下
avast的拦截器拦截了,还没我等按拒绝这家伙就出现了....

显示全部楼层 · 发表于 2007-8-15 10:27:08

估计又是在搞什么恶作剧了

[病毒样本] 91af66

本帖子中包含更多资源

本帖子中包含更多资源

回复 #9 tracydk 的帖子