[MD5: B92ACB 9E7DF1]

显示全部楼层 · 发表于 2007-9-3 17:13:24

F:\Tonger2003.zip:<ZIP>\soft.exe : infected MalwareScope.Trojan-PSW.Game.14
F:\Tonger2003.zip:<ZIP>\vip.exe : is suspected of Win32.Trojan.Downloader (http://...)

显示全部楼层 · 发表于 2007-9-3 17:19:38

Begin scan in 'C:\Documents and Settings\tim\桌面\Tonger2003.zip'
C:\Documents and Settings\tim\桌面\Tonger2003.zip
  [0] Archive type: ZIP
  --> soft.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.4117
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    A backup was created as '4749d20f.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 17:21:01

TR/Hijack.Explor.4117,
TR/Dropper.Gen

显示全部楼层 · 发表于 2007-9-3 17:24:46

2007-9-3 17:24:13 Deleted WHUT-D9193C067E\gho WinRAR.exe C:\Documents and Settings\gho\桌面\vip.exe Generic Downloader.h (Trojan)

显示全部楼层 · 发表于 2007-9-3 17:25:43

C:\Documents and Settings\gho\桌面\soft.exe - 可能是 Win32/Genetik 木马的一个变种

显示全部楼层 · 发表于 2007-9-3 17:26:43

AVAST飘过

显示全部楼层 · 发表于 2007-9-3 17:30:11

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Tonger2004.zip/soft.exe
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Tonger2004.zip/vip.exe//PE_Patch.UPX

显示全部楼层 · 发表于 2007-9-3 17:39:22

扫描开始时间: 2007-9-3 17:38:46
扫描日志
NOD32 版本 2498 (20070902) NT
命令行: F:\virus\Tonger2003.zip

日期: 2007年9月3日时间: 17:38:47
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\Tonger2003.zip
F:\virus\Tonger2003.zip ?ZIP ?soft.exe<病毒 - 可能是 Win32/Genetik 木马变种>
F:\virus\Tonger2003.zip ?ZIP ?vip.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
已扫描文件数量: 2
已发现病毒数量: 2
完成时间: 17:38:47 总共扫描时间: 0 秒 (00:00:00)

注意:
[7] 文件可能感染了未知病毒。

显示全部楼层 · 发表于 2007-9-3 17:40:58

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2684
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\vip.exe - Infected with PDB-42 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\soft.exe - Infected with Win32.PDB-2364 Malware program (Paranoia Database) - Deleted

2 Files scanned
2 Infected files found
0 Suspicious files found
0 Files cured
2 Files deleted

[病毒样本] [MD5: B92ACB 9E7DF1]

本帖子中包含更多资源

浏览过的版块