[9769d9c9c] ,全盘感染

绅博周幸

a-squared	3.0.0.123	2007.09.02	2007-09-02	-	4.001
Arcavir	1.0.4	200709031933	2007-09-03	-	1.213
AVAST	1.0.8	000772-1	2007-09-03	-	3.042
AVG	7.5.48.442	269.13.3/986	2007-09-03	-	1.460
BitDefender	7.60825.833392	7.14611	2007-09-04	Generic.Malware.SBdldsp.84560610	3.021
CA (VET)	8.4.0.24	31.1.5105	2007-09-03	-	0.885
ClamAV	0.91.1	4142	2007-09-04	Trojan.Packed-75	0.016
ewido	4.0.0.2	2007.09.03	2007-09-03	-	2.099
F-SECURE	5.51.6100	2007.09.04.01	2007-09-04	Virus.Win32.AutoRun.fk	2.634
IKARUS	T3.1.1.12	2007.09.03.69442	2007-09-03	Backdoor.Win32.Rbot.bpb	1.247
MKS_VIR	2.01	2007.09.03	2007-09-03	-	1.975
NOD32	2.70.8	2501	2007-09-03	a variant of Win32/AutoRun.K worm	0.128
冰岛杀毒	3.16.16	2007.09.03	2007-09-03	W32/CrazyCrunch-based!Maximus	0.876
卡巴斯基	5.5.10	2007.09.04	2007-09-04	Virus.Win32.AutoRun.fk	0.042
大蜘蛛	4.33	2007.09.03	2007-09-03	Win32.HLLW.Autoruner.286	5.813
小红伞	7.4.1.66	6.39.1.81	2007-09-03	TR/Crypt.XPACK.Gen	2.305
江民杀毒	10.00.650	2007.09.03	2007-09-03	-	0.741
迈克菲	5.1.00	5111	2007-09-03	-	1.076
金山毒霸	2007.6.20.249	2007.9.3	2007-09-03	-	0.826

绅博周幸

金山,瑞星,KV全部扫描挂

ssy275

结果: 找到 1 恶意软件
Virus.Win32.AutoRun.fk (病毒)
C:\Documents and Settings\ssy\桌面\12.rar\12.exe

1688388728

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=123159 is infected with Virus.Win32.AutoRun.fk virus

jhtl

诺顿trojan.packed.16 楼主发的几个，诺顿都报这个名字。。。

capsshift

红伞报。

Begin scan in 'C:\BOOT\12.rar'
C:\BOOT\12.rar
  [0] Archive type: RAR
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was moved to '470ae78e.qua'!

绅博周幸

原帖由 jhtl 于 2007-9-4 13:04 发表
诺顿trojan.packed.16 楼主发的几个，诺顿都报这个名字。。。

报壳

scottxzt

googlehack

Mcafee更新总是不及时

gqstar

原帖由 googlehack 于 2007-9-5 23:03 发表
Mcafee更新总是不及时

看来咖啡还得靠规则