[MD5: 0E5C29 CDFD10 D80995]

显示全部楼层 · 发表于 2007-8-26 20:17:52

[MD5: 0E5C29 CDFD10 D80995]

红色的重复了，特别注明

显示全部楼层 · 发表于 2007-8-26 20:19:59

2007-8-26 20:19:49 Scanning Log
2007-8-26 20:19:49 Version of virus signature database: 2484 (20070825)
2007-8-26 20:19:49 Date: 26.8.2007 Time: 20:19:49
2007-8-26 20:19:49 Scanned disks, folders and files: F:\v\桌面.rar
2007-8-26 20:19:53 F:\v\桌面.rar » RAR » rkikrs.dll - probably a variant of Win32/Genetik trojan
2007-8-26 20:19:53 F:\v\桌面.rar » RAR » 13Sy.exe - a variant of Win32/AutoRun.Q worm
2007-8-26 20:19:53 F:\v\桌面.rar » RAR » qjgins.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
2007-8-26 20:19:53 Number of scanned files: 4
2007-8-26 20:19:53 Number of threats found: 3
2007-8-26 20:19:53 Time of completion: 20:19:53 Total scanning time: 4 sec (00:00:04)

显示全部楼层 · 发表于 2007-8-26 20:24:54

显示全部楼层 · 发表于 2007-8-26 20:28:12

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\13SY.EXE
由
E:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) E:\AUTORUN.EXE
2) E:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
E:\AUTORUN.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QJGINS.EXE
1) C:\DFD2993953.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QJGINS.EXE
1) C:\DFD2993953.BAT
是否删除可疑程序?

楼上用微点的速度点，我比你快

显示全部楼层 · 发表于 2007-8-26 21:26:53

Hello,

13Sy.exed, Virus.Win32.AutoRun.ip,
qjgins.exed - Trojan-PSW.Win32.OnLineGames.aqn

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2007-8-26 21:29:09

显示全部楼层 · 发表于 2007-8-26 23:46:39

C:\Documents and Settings\uhthn\Desktop\virus\rkikrs.dll;25088;Infected;MalwareScope.Trojan-PSW.Game.1;;
C:\Documents and Settings\uhthn\Desktop\virus\13Sy.exe;33393;Infected;MalwareScope.Trojan-PSW.Game.7;;

显示全部楼层 · 发表于 2007-8-27 08:19:34

Starting the file scan:

Begin scan in 'F:\病毒样本\桌面.rar'
F:\病毒样本\桌面.rar
  [0] Archive type: RAR
  --> rkikrs.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.aqj.1
  --> 13Sy.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.47216.1
  --> qjgins.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.aqn.1
   [INFO]    The file was deleted!

[病毒样本] [MD5: 0E5C29 CDFD10 D80995]

本帖子中包含更多资源

本帖子中包含更多资源