2个 [MD5: 2277A1 E460A1]

显示全部楼层 · 发表于 2007-8-25 12:13:13

只要红伞表搞的误报到杀了系统就马马忽忽吧...

显示全部楼层 · 发表于 2007-8-25 12:21:26

到现在没听说过红伞杀过系统文件

显示全部楼层 · 发表于 2007-8-25 12:29:49

原帖由 za1012 于 2007-8-25 12:21 发表
到现在没听说过红伞杀过系统文件

报过驱动程序里的文件，都是误报了

显示全部楼层 · 发表于 2007-8-25 12:32:25

Start of the scan: 2007年8月25日  12:31

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\2.zip
  [0] Archive type: ZIP
--> 2/lady.com
   [1] Archive type: RAR SFX (self extracting)
   --> ®à±.exe
      [2] Archive type: RAR SFX (self extracting)
      --> TF.exe
         [DETECTION] Contains suspicious code HEUR/Malware
  --> 2/dog.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

End of the scan: 2007年8月25日  12:31
Used time: 00:10 min

The scan has been done completely.

   1 Scanning directories
   7 Files were scanned
   2 viruses and/or unwanted programs were found
   2 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   3 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-25 12:34:02

Hello,

dog.exe_

No malicious code was found in this file.

lady.com_ - Trojan-PSW.Win32.Magania.ti

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 2.zip

显示全部楼层 · 发表于 2007-8-25 15:17:08

AVAST杀了1个

显示全部楼层 · 发表于 2007-8-25 15:46:45

dog.exe没有问题
HEUR/Crypted是报壳...
报的没错

lady.exe 2层自解压
放出TF.exe
TF.exe启发HEUR/Malware
同样没错~

显示全部楼层 · 发表于 2007-8-25 18:27:41

deleted: Trojan program Trojan-PSW.Win32.Magania.ti File: E:\Documents and Settings\Administrator\桌面\2\lady.com//data.rar/??.exe//data.rar/TF.exe

显示全部楼层 · 发表于 2007-8-25 18:44:09

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=DeepScan:Generic.Lineage.A5ED6588

显示全部楼层 · 发表于 2007-8-26 00:41:59

C:\Documents and Settings\uhthn\Desktop\virus\lady.com:<RAR>\桌面.exe:<RAR>\TF.exe : infected MalwareScope.Trojan-PSW.Game.14

[病毒样本] 2个 [MD5: 2277A1 E460A1]

回复 #10 solcroft 的帖子

浏览过的版块