【61a01e】第六

显示全部楼层 · 发表于 2007-8-31 10:30:30

来源
http://bbs.kafan.cn/viewthread.php?tid=124680&extra=page%3D1

[ 本帖最后由 jimmyleo 于 2007-8-31 10:33 编辑 ]

显示全部楼层 · 发表于 2007-8-31 10:33:13

Ikarus:
31:08:2007 10:32:42 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\zhenjia\桌面\6056.rar
File scanned: C:\Documents and Settings\zhenjia\桌面\6056.rar:Zone.Identifier
File scanned: C:\Documents and Settings\zhenjia\桌面\6056.rar - SIGNATURE FOUND "Trojan-PWS.Win32.Agent.BU"
31:08:2007 10:32:43 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2007-8-31 10:35:23

江民杀毒 10.00.650 2007.08.30 2007-08-30 Trojan/Agent.oja
金山毒霸 2007.6.20.249 2007.9.1 2007-09-01 -

显示全部楼层 · 发表于 2007-8-31 10:36:08

卡吧pass，今天卡吧pass一堆了。。。。伤心去了！

显示全部楼层 · 发表于 2007-8-31 10:42:03

显示全部楼层 · 发表于 2007-8-31 10:43:22

Starting the file scan:

Begin scan in 'F:\病毒样本\6056.rar'
F:\病毒样本\6056.rar
  [0] Archive type: RAR
  --> 6056.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-31 10:45:36

NOD32 kill

显示全部楼层 · 发表于 2007-8-31 11:25:11

C:\Documents and Settings\uhthn\Desktop\virus\6056.exe : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 0    - total    : 1
- scanned       : 0    -  scanned : 0    - scanned    : 1
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 0    - suspicious  : 1

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\6056.exe - Suspicious of MalwareSpy.Trojan-PSW.Game.29

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-8-31 12:30:05

检测到一个应用程序尝试访问一个受保护的文件对象
文件路径: C:\WINDOWS\system32\dllcache\svchost.exe

检测到一个应用程序尝试写入到受保护的注册表区域
键路径: USER\S-1-5-21-602162358-1482476501-1177238915-500\SYSTEM\CurrentControlSet\Services\svchost
值名称: Description

显示全部楼层 · 发表于 2007-8-31 15:11:09

微点砍掉

[病毒样本] 【61a01e】第六

本帖子中包含更多资源

本帖子中包含更多资源

d:\病毒库\6056\6056.exe

本帖子中包含更多资源