下载者和产物【BE6978 A55C41】

显示全部楼层 · 发表于 2007-9-3 14:36:26

2007-9-3 14:35:49 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe C:\Documents and Settings\gho\桌面\2007mmm.exe New Malware.n (Trojan)

显示全部楼层 · 发表于 2007-9-3 14:38:14

C:\Documents and Settings\gho\桌面\nice.scr >>RAR >>maikmr.exe - Win32/AutoRun.K 蠕虫的变种

显示全部楼层 · 发表于 2007-9-3 14:38:21

10楼的不是用Comodo？？怎么又换回ESS了？？？

显示全部楼层 · 发表于 2007-9-3 14:40:25

监控有严重的bug，有时候无法正常操作，有等于无

显示全部楼层 · 发表于 2007-9-3 14:41:31

其他杀软都报autorun 虫子，红伞报木马 --- TR/Delphi.Downloader.Gen，根本就是瞎报。

显示全部楼层 · 发表于 2007-9-3 15:49:00

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2634
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\nice.scr - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\2007mmm.exe - Suspicious of Trojan-PSW.Game.3

2 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-3 17:05:30

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\桌面.rar'
C:\Documents and Settings\tim\桌面\桌面.rar
  [0] Archive type: RAR
--> nice.scr
   [1] Archive type: RAR SFX (self extracting)
   --> maikmr.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 2007mmm.exe
   [DETECTION] Is the Trojan horse TR/PSW.Maran.AU
   [INFO]    A backup was created as '470a65ae.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

[病毒样本] 下载者和产物【BE6978 A55C41】

回复 13楼 EQ2 的帖子