[F624A1]瑞星杀了

显示全部楼层 · 发表于 2007-9-2 17:09:51

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\110.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\KERNL32.EXE
2) C:\WINDOWS.0\SVCHOST.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-2 17:12:10

Starting the file scan:

Begin scan in 'F:\病毒样本\110.zip'
F:\病毒样本\110.zip
  [0] Archive type: ZIP
  --> 110.exe
   [DETECTION] Is the Trojan horse TR/Small.118784
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-2 17:12:35

显示全部楼层 · 发表于 2007-9-2 17:22:25

Scan performed at: 2007-9-2 17:22:07
Scanning Log
NOD32 version 2497 (20070901) NT
Command line: C:\Documents and Settings\Don johnson\桌面\110.zip
Operating memory - is OK

Date: 2.9.2007 Time: 17:22:11
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\110.zip
C:\Documents and Settings\Don johnson\桌面\110.zip ?ZIP ?110.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 17:22:11 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-9-2 18:09:05

这个塞门和NOD全看到了，瑞星看来有长进啊

显示全部楼层 · 发表于 2007-9-2 18:10:33

已检测到: 病毒 Heur.Trojan.Generic (变种) URL: http://bbs.kafan.cn/attachment.php?aid=122434/110.exe//ASPack

显示全部楼层 · 发表于 2007-9-2 18:23:20

咖啡杀了这次不是启发=。=

显示全部楼层 · 发表于 2007-9-2 18:32:49

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2486
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\110.exe

C:\Documents and Settings\uhthn\Desktop\110.exe - Suspicious of Win32.Trojan-PSW.Game.8

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-2 18:47:52

不试了最垃圾的都杀了红伞就不试了

[病毒样本] [F624A1]瑞星杀了

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块