[MD5: DDE0F5]

显示全部楼层 · 发表于 2007-8-30 21:27:33

C:\ABC\Tonger2003.zip:\~Temp4377.tmp - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\Tonger2003.zip

2 文件被扫描
(1 压缩档 1 文件)
1 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.047

显示全部楼层 · 发表于 2007-8-30 21:29:50

扫描进行于：2007-8-30 21:29:14
扫描日志
NOD32版本 2492 (20070830) NT
命令行： D:\Documents and Settings\EKINCHENG\桌面\Tonger2003.zip

日期： 30.8.2007 时间：21:29:16
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\Documents and Settings\EKINCHENG\桌面\Tonger2003.zip
D:\Documents and Settings\EKINCHENG\桌面\Tonger2003.zip >>ZIP >>~Temp4377.tmp - Win32/PSW.OnLineGames.NBR 木马的变种
已扫描的文件数目：2
已发现的病毒数目：1
已清除病毒的文件数目：1
完成时间： 21:29:16 总扫描时间：0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-8-30 21:30:17

Ikarus:
30:08:2007 21:29:41 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\zhenjia\桌面\Tonger2003
File scanned: C:\Documents and Settings\zhenjia\桌面\Tonger2003\~Temp4377.tmp - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
30:08:2007 21:29:41 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 1
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2007-8-30 21:34:19

Starting the file scan:

Begin scan in 'F:\病毒样本\Tonger2003.zip'
F:\病毒样本\Tonger2003.zip
  [0] Archive type: ZIP
  --> ~Temp4377.tmp
   [DETECTION] Is the Trojan horse TR/Autorun.BK
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-30 21:34:25

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\~TEMP4377.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.DLL
3) C:\PROGRAM FILES\COMMON FILES\GOSKDL.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-8-30 21:36:04

C:\Documents and Settings\uhthn\Desktop\virus\~Temp4377.tmp : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 0    - total    : 1
- scanned       : 0    -  scanned : 0    - scanned    : 1
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 0    - suspicious  : 1

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\~Temp4377.tmp - Suspicious of Trojan-PSW.Game.3

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-8-30 21:44:44

fs avk06 pass

显示全部楼层 · 发表于 2007-8-30 22:20:04

显示全部楼层 · 发表于 2007-8-30 22:22:16

nis2008

[病毒样本] [MD5: DDE0F5]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源