ad18f5，针对卡巴及国产

显示全部楼层 · 发表于 2007-9-7 19:38:06

HEUR/Malware

显示全部楼层 · 发表于 2007-9-7 22:53:28

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\svchost.zip'
C:\Documents and Settings\Administrator\My Documents\
  svchost.zip
[0] Archive type: ZIP
--> svchost.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-7 23:17:45

fsis2008 pass

显示全部楼层 · 发表于 2007-9-7 23:29:11

fs其他引擎

显示全部楼层 · 发表于 2007-9-8 00:05:29

为费尔默哀！

显示全部楼层 · 发表于 2007-9-8 00:33:20

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3787
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\svchost.exe

C:\Documents and Settings\uhthn\Desktop\svchost.exe - Suspicious of Trojan-PSW.Game.3

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-8 01:15:45

为卡巴默哀~~杀不了我实机测的~主动防御也过了~

显示全部楼层 · 发表于 2007-9-8 12:16:26

危险进程(PID:3600): C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX02.375\svchost.exe

产品名称: Microsoft(R) Windows(R) Operating System
文件版本: 0.0.0.0
公司名称: Microsoft Corporation
文件描述: 无
数字签名: 没有发现签名

危险级别: 高
级别评分: 58.418a00
状态: 进程已被结束，但还没有清除，等待进一步处理。

在线扫描发现它是一个“后门程序”，推荐删除。

显示全部楼层 · 发表于 2007-9-8 12:49:12

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description Agent.HJG
Error code: -1602
Requested URL: /attachment.php?aid=124850
Requested HTTP method: GET
Requested ContentType: application/x-zip-compressed

显示全部楼层 · 发表于 2007-9-8 13:36:29

一看病毒名字就知道是要伪装入进程的

[病毒样本] ad18f5，针对卡巴及国产