[MD5: 3806AD 0822DB]

显示全部楼层 · 发表于 2007-9-4 21:47:30

detected: virus Heur.Trojan.Generic File: C:\Documents and Settings\Owner\×ÀÃæ\Tonger2003.zip/vip.exe//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Tonger2003.zip/top.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-9-4 21:50:24

显示全部楼层 · 发表于 2007-9-4 21:56:17

已检测到: 木马程序 Trojan.Win32.StartPage.apw URL: http://bbs.kafan.cn/attachment.php?aid=123324//1.exe//PE_Patch
已检测到: 病毒 Heur.Trojan.Generic URL: http://bbs.kafan.cn/attachment.p ... ct//PE_Patch.MaskPE

显示全部楼层 · 发表于 2007-9-4 22:09:19

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\Tonger2003.zip'
C:\Documents and Settings\tim\桌面\Tonger2003.zip
  [0] Archive type: ZIP
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Agent.19968.165
  --> top.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.4152
   [INFO]    A backup was created as '474b6776.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-5 01:14:10

nod pass

显示全部楼层 · 发表于 2007-9-5 09:45:23

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

显示全部楼层 · 发表于 2007-9-5 09:47:25

Virus or unwanted program 'TR/Hijack.Explor.4152
Virus or unwanted program 'TR/Agent.19968.165 [TR/Agent.19968.165]'
÷

显示全部楼层 · 发表于 2007-9-5 10:00:42

红伞报。
Begin scan in 'C:\BOOT\Tonger2003.zip'
C:\BOOT\Tonger2003.zip
  [0] Archive type: ZIP
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Agent.19968.165
  --> top.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.4152
   [INFO]    The file was moved to '474c0e31.qua'!

显示全部楼层 · 发表于 2007-9-5 10:39:05

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TOP.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSTEM.DAT
是否删除木马程序及其衍生物?

VIP等了N久时间
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIP.EXE
是否删除木马程序及其衍生物?

[病毒样本] [MD5: 3806AD 0822DB]

本帖子中包含更多资源

本帖子中包含更多资源