[MD5: 66CFB0]全盘捆绑不知能否运行

显示全部楼层 · 发表于 2007-8-17 22:11:43

原帖由 promised 于 2007-8-17 21:18 发表
国际大玩笑
2007-08-17 21:15:46 运行应用程序操作:允许
进程路径:C:\windows\Explorer.EXE
文件路径:C:\ABC\Firewall\Firewall.exe
触发规则:应用程序规则->系统程序->%windir%\Explorer. ...

FD规则分享下可以不

显示全部楼层 · 发表于 2007-8-17 22:41:20

没玩HIPS了，不相信K7的主动防御，K7扫描不报，闪人

显示全部楼层 · 发表于 2007-8-17 23:02:14

咖啡防住了

显示全部楼层 · 发表于 2007-8-17 23:06:49

卡巴没有反应，是病毒吗？
已上报。

显示全部楼层 · 发表于 2007-8-18 01:55:24

卡巴有回信。

Hello,

Firewall.exe - Virus.Win32.AutoRun.hj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-8-18 03:28:10

好明显的行为

显示全部楼层 · 发表于 2007-8-18 05:01:14

原帖由 微点卫士 于 2007-8-17 22:26 发表
微点怎么挂了

不用担心，有老鹰

显示全部楼层 · 发表于 2007-9-2 18:24:40

Begin scan in 'C:\Documents and Settings\dell\桌面\Firewall.rar'
C:\Documents and Settings\dell\桌面\Firewall.rar
  [0] Archive type: RAR
  --> Firewall.exe
   [DETECTION] Is the Trojan horse TR/AutoRun.HJ
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-2 18:44:30

Result: 1 malware found
Virus.Win32.AutoRun.hj (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Firewall.rar\Firewall.exe

显示全部楼层 · 发表于 2007-9-2 19:38:11

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\Firewall.rar'
C:\Documents and Settings\tim\桌面\Firewall.rar
  [0] Archive type: RAR
  --> Firewall.exe
   [DETECTION] Is the Trojan horse TR/AutoRun.HJ
   [INFO]    A backup was created as '474ca104.qua'  ( QUARANTINE )
   [INFO]    The file was deleted

[病毒样本] [MD5: 66CFB0]全盘捆绑不知能否运行

本帖子中包含更多资源

[病毒样本] [MD5: 66CFB0]全盘捆绑 不知能否运行

本帖子中包含更多资源

[病毒样本] [MD5: 66CFB0]全盘捆绑不知能否运行