[MD5: E85DE4]

显示全部楼层 · 发表于 2007-8-29 23:29:53

扫描进行于：2007-8-29 23:29:25
扫描日志
NOD32版本 2490 (20070829) NT
命令行： D:\Documents and Settings\EKINCHENG\桌面\Tonger2003.zip

日期： 29.8.2007 时间：23:29:27
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\Documents and Settings\EKINCHENG\桌面\Tonger2003.zip
D:\Documents and Settings\EKINCHENG\桌面\Tonger2003.zip >>ZIP >>s168.exe - Win32/PSW.OnLineGames.NBR 木马的变种
已扫描的文件数目：2
已发现的病毒数目：1
已清除病毒的文件数目：1
完成时间： 23:29:27 总扫描时间：0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-8-29 23:32:28

过卡巴

显示全部楼层 · 发表于 2007-8-29 23:34:03

卡巴 7.0.0.125 扫描pass，主动防御拦截
上报ing。。。。。。。

显示全部楼层 · 发表于 2007-8-29 23:43:07

FS PASS

显示全部楼层 · 发表于 2007-8-29 23:43:14

C:\Documents and Settings\uhthn\Desktop\virus\s168.exe : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 0    - total    : 1
- scanned       : 0    -  scanned : 0    - scanned    : 1
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 0    - suspicious  : 1

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\s168.exe - Suspicious of Win32.Trojan-PSW.Game.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-8-29 23:50:27

Begin scan in 'C:\Documents and Settings\dell\桌面\Tonger2003.zip'
C:\Documents and Settings\dell\桌面\Tonger2003.zip
  [0] Archive type: ZIP
  --> s168.exe
   [DETECTION] Is the Trojan horse TR/Autorun.BK
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-8-30 00:45:17

显示全部楼层 · 发表于 2007-8-30 03:20:36

硬盘咔嚓咔嚓咔嚓响了半天，诺顿企业版报了
W32.SillyFDCRisk
Level 1: Very Low
Discovered: February 27, 2007
Updated: February 27, 2007 4:58:33 PM
Type: Worm
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows 2000

W32.SillyFDC is a generic detection that detects variants of the W32.Silly family of worms that spread by copying itself to removable media and may download other malicious applications.

ProtectionInitial Rapid Release version January 8, 2004
Latest Rapid Release version August 28, 2007 revision 023
Initial Daily Certified version January 8, 2004
Latest Daily Certified version August 29, 2007 revision 002
Initial Weekly Certified release date July 12, 2006
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat AssessmentWildWild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy
DamageDamage Level: Low
Degrades Performance: Copying itself to various folder locations may degrade performance.
DistributionDistribution Level: Low
Target of Infection: Floppy drive.

显示全部楼层 · 发表于 2007-8-30 09:08:14

已删除: 病毒 Virus.Win32.AutoRun.ji 文件: E:\test\Tonger2003.zip/s168.exe

[病毒样本] [MD5: E85DE4]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源