a1881b avast挂

显示全部楼层 · 发表于 2007-8-16 02:42:18

C:\WINDOWS\AVPSrv.exe  2007-08-16 02:37:01

2884    进程:00000001-692D2B
操作名:  设置值
根键: HKEY_LOCAL_MACHINE
主键: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
值名: AVPSrv
键值: "C:\windows\AVPSrv.exe"
用户操作:禁止改变!

安全盾阻止了C盘windows目录下一个pe的生成和一个注册表值的改变

C:\WINDOWS\AVPSrv.exe  2007-08-16 02:37:32

2760    进程:00000001-692D2B
操作名:  设置值
根键: HKEY_LOCAL_MACHINE
主键: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
值名: AVPSrv
键值: "C:\windows\AVPSrv.exe"
用户操作:用户认可!

C:\WINDOWS\system32\AVPSrv.dll  2007-08-16 02:37:38

当允许注册表值改变后,又阻止了一个dll生成

显示全部楼层 · 发表于 2007-8-16 03:04:44

detected: Trojan program Trojan-PSW.Win32.OnLineGames.wp URL: http://bbs.kafan.cn/attachment.php?aid=114311//FC.exe

显示全部楼层 · 发表于 2007-8-16 03:22:32

Start of the scan: 2007年8月16日  03:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\FC.rar'
C:\Documents and Settings\Administrator\桌面\FC.rar
  [0] Archive type: RAR
  --> FC.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF

显示全部楼层 · 发表于 2007-8-16 03:31:11

木马名称:Trojan-PSW.Win32.OnLineGames.iaa

程序:
D:\病毒库\FC.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-8-16 04:40:47

Trojan.PSW.Win32.RBLAND.aa

显示全部楼层 · 发表于 2007-8-16 06:48:21

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Generic.Onlinegames.1.FB6967F0

显示全部楼层 · 发表于 2007-8-16 07:31:37

诺顿PASS

显示全部楼层 · 发表于 2007-8-16 08:33:11

微点：
木马名称:Trojan-PSW.Win32.OnLineGames.iaa

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\FC.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-8-16 08:52:27

C:\virus\FC.exe - probably infected with BINARYRES

显示全部楼层 · 发表于 2007-8-16 09:30:28

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.04
nvcbin.def revision 5.90.00 of 2007/08/15 19:07:26 (829574 variants)
nvcmacro.def revision 5.90.00 of 2007/08/06 19:46:49 (20358 variants)
Total number of variants: 849932
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD15.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: F:\v\v1\FC.exe
   31 ms F:\v\v1\FC.exe                                              Trojan OnLineGames.gen26 ()
      0 ms F:\v\v1\FC.exe:Zone.Identifier
- File F:\v\v1\FC.exe quarantined.
- File F:\v\v1\FC.exe deleted.

===================================================================================================

The scanning started: 2007/08/16 09:30:07
            ended: 2007/08/16 09:30:07
Logged on as       : Administrator
on hostname       : 2FF87FC2B9AB46F

Scanning results:
Total number of files found..............................:    2
Number of files scanned..................................:    2
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

[病毒样本] a1881b avast挂

本帖子中包含更多资源