168跟新【5b2335】

显示全部楼层 · 发表于 2007-8-15 20:14:11

Start of the scan: 2007年8月15日  20:13

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\s168.zip
  [0] Archive type: ZIP
  --> s168.exe
   [DETECTION] Is the Trojan horse TR/Autorun.BK
   [INFO]    The file was deleted!

End of the scan: 2007年8月15日  20:13
Used time: 00:11 min

The scan has been done completely.

   1 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-15 20:49:09

显示全部楼层 · 发表于 2007-8-15 21:44:40

C:\Documents and Settings\Administrator\桌面\s168.zip »ZIP »s168.exe - a variant of Win32/PSW.OnLineGames.NBR trojan

显示全部楼层 · 发表于 2007-8-15 22:57:40

红伞C
Found a virus or unwanted program 'TR/Autorun.BK' [trojan]
in file 'C:\Users\****\Desktop\s168.zip'.
Action taken:
The file was moved to "46f91490.qua"!

显示全部楼层 · 发表于 2007-8-15 23:07:41

原帖由 微点卫士 于 2007-8-15 17:34 发表
微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\S168.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.DLL
3) ...

显示全部楼层 · 发表于 2007-8-16 07:37:35

[病毒样本] 168跟新【5b2335】

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源