754a68，继续过NOD

显示全部楼层 · 发表于 2007-9-2 22:41:41

detected: Trojan program Trojan-PSW.Win32.Magania.vq URL: http://bbs.kafan.cn/attachment.php?aid=122604//1.com//data.rar//¶WÎx½ì¨Æ.exe//data.rar//archive comment

显示全部楼层 · 发表于 2007-9-2 22:43:51

又是这类东西，上报微点

显示全部楼层 · 发表于 2007-9-2 22:54:09

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2498
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder\1.com

C:\Documents and Settings\uhthn\Desktop\New Folder\1.com - Infected with Win32.PDB-2051 Malware program (Paranoia Database) - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-2 23:01:06

kiss

显示全部楼层 · 发表于 2007-9-2 23:25:14

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1.COM
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RARSFX0\超屌趣事.EXE

触发了创建规则……

显示全部楼层 · 发表于 2007-9-2 23:34:15

Begin scan in 'C:\Documents and Settings\dell\桌面\1.rar'
C:\Documents and Settings\dell\桌面\1.rar
  [0] Archive type: RAR
--> 1.com
   [1] Archive type: RAR SFX (self extracting)
   --> 8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 00:38:02

最近老是遇上这种怪东西，到底有什么危害？

显示全部楼层 · 发表于 2007-9-3 07:06:33

C:\Documents and Settings\Administrator\桌面\1.rar=>1.com=>(RAR Sfx o)=>8.exe Infected: Packer.Malware.NSAnti.I

显示全部楼层 · 发表于 2007-9-3 08:05:58

Result: 1 malware found
Trojan-PSW.Win32.OnLineGames.ber (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\1.com
第一次发现FS和卡巴报的不同

[ 本帖最后由 ssy275 于 2007-9-3 08:10 编辑 ]

[病毒样本] 754a68，继续过NOD

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块