两个KV扫描不报 [MD5: 4A0004 A64C7A]

显示全部楼层 · 发表于 2007-8-18 21:54:44

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ahs File: C:\Documents and Settings\Owner\×ÀÃæ\2.rar/ma[1].exe//BeRo//PE_Patch.UPX//UPX//PE_Patch.MaskPE
deleted: Trojan program Trojan.Win32.Agent.adx File: C:\Documents and Settings\Owner\×ÀÃæ\2.rar/help.exe//UPX

显示全部楼层 · 发表于 2007-8-18 22:03:30

Start of the scan: 2007年8月18日  22:02

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\svchost[1].part1.rar
  [0] Archive type: RAR
  --> ma[1].exe
   [DETECTION] Is the Trojan horse TR/Genetik.HX
  --> help.exe
   [DETECTION] Is the Trojan horse TR/Agent.adx.2
   [INFO]    The file was deleted!

End of the scan: 2007年8月18日  22:02
Used time: 00:11 min

The scan has been done completely.

   1 Scanning directories
   3 Files were scanned
   2 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-18 22:04:56

2007-08-18 22:02:23 应用程序保护(运行应用程序)    操作:允许
进程路径:C:\WINDOWS\Explorer.EXE
文件路径:F:\help.exe

2007-08-18 22:02:30 应用程序保护(修改其它进程内存)    操作:允许
进程路径:F:\help.exe
目标进程:C:\WINDOWS\system32\winlogon.exe

2007-08-18 22:02:34 应用程序保护(创建远程线程)    操作:允许
进程路径:F:\help.exe
目标进程:C:\WINDOWS\system32\winlogon.exe

2007-08-18 22:02:34 文件保护(修改文件)    操作:阻止
进程路径:F:\help.exe
文件路径:C:\WINDOWS\system32\userinit.exe

2007-08-18 22:03:48 应用程序保护(运行应用程序)    操作:允许
进程路径:C:\WINDOWS\Explorer.EXE
文件路径:F:\ma[1].exe

2007-08-18 22:03:48 文件保护(创建文件)    操作:阻止
进程路径:F:\ma[1].exe
文件路径:C:\WINDOWS\java\AFF995DC4281.dll

2007-08-18 22:03:48 文件保护(创建文件)    操作:阻止
进程路径:F:\ma[1].exe
文件路径:C:\WINDOWS\java\AFF995DC4281.exe

2007-08-18 22:03:48 文件保护(创建文件)    操作:阻止
进程路径:F:\ma[1].exe
文件路径:C:\WINDOWS\1.bat

显示全部楼层 · 发表于 2007-8-18 22:30:17

金山报

显示全部楼层 · 发表于 2007-8-18 23:04:07

驱逐舰报鸽子！

显示全部楼层 · 发表于 2007-8-18 23:41:51

C:\virus\ma[1].exe - infected with BackDoor.Pigeon.199

显示全部楼层 · 发表于 2007-8-19 08:21:30

检测到病毒: Trojan-PSW.Win32.OnLineGames.ahs, Trojan.Win32.Agent.adx

发现病毒,在下载网页内容时.

地址: bbs.kafan.cn

显示全部楼层 · 发表于 2007-8-19 12:09:22

mcafee pass

显示全部楼层 · 发表于 2007-8-19 12:09:53

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ahs 文件: C:\Documents and Settings\gho\桌面\ma[1].exe//BeRo//PE_Patch.UPX//UPX//PE_Patch.MaskPE
已删除: 木马程序 Trojan.Win32.Agent.adx 文件: C:\Documents and Settings\gho\桌面\help.exe//UPX

显示全部楼层 · 发表于 2007-8-19 22:59:03

BD被过了啊，郁闷

[病毒样本] 两个KV扫描不报 [MD5: 4A0004 A64C7A]

浏览过的版块