[MD5: CE574A DF4D68 DF9AF9]

显示全部楼层 · 发表于 2007-9-7 21:16:31

描系统区域...
扫描所选择的目录和文件...
对象: top.exe
在压缩档案里: C:\Documents and Settings\ssy\桌面\Tonger2003.zip
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD 引擎)
对象: vip1.exe
在压缩档案里: C:\Documents and Settings\ssy\桌面\Tonger2003.zip
Status: 已发现病毒
病毒: Generic.Malware.SWYddldg.48E57063 (BD 引擎)
对象: vip.exe
在压缩档案里: C:\Documents and Settings\ssy\桌面\Tonger2003.zip
Status: 已发现病毒
病毒: DeepScan:Generic.Malware.SCdld!!g.766BF716 (BD 引擎)
对象: Tonger2003.zip
路径: C:\Documents and Settings\ssy\桌面
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack, Generic.Malware.SWYddldg.48E57063, DeepScan:Generic.Malware.SCdld!!g.766BF716 (BD 引擎)

显示全部楼层 · 发表于 2007-9-7 21:17:12

显示全部楼层 · 发表于 2007-9-7 21:24:32

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.Agent.iok

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.42

显示全部楼层 · 发表于 2007-9-7 21:30:53

显示全部楼层 · 发表于 2007-9-7 22:03:15

Begin scan in 'C:\Documents and Settings\dell\桌面\Tonger2003.zip'
C:\Documents and Settings\dell\桌面\Tonger2003.zip
  [0] Archive type: ZIP
  --> top.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> vip1.exe
   [DETECTION] Is the Trojan horse TR/Agent.19968.166
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-7 22:05:44

Scan performed at: 2007-9-7 22:05:40
Scanning Log
NOD32 version 2513 (20070907) NT
Command line: C:\Documents and Settings\Don johnson\桌面\Tonger2003.zip
Operating memory - is OK

Date: 7.9.2007 Time: 22:05:44
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\Tonger2003.zip
C:\Documents and Settings\Don johnson\桌面\Tonger2003.zip ?ZIP ?vip1.exe - a variant of Win32/Delf.NDL worm
C:\Documents and Settings\Don johnson\桌面\Tonger2003.zip ?ZIP ?vip.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 22:05:45 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-9-7 22:11:15

TR/Hijack.Explor.4219

显示全部楼层 · 发表于 2007-9-7 22:32:42

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TOP.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSTEM.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIP.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSTEM.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIP1.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-7 23:30:51

fsis pass

[病毒样本] [MD5: CE574A DF4D68 DF9AF9]

本帖子中包含更多资源

本帖子中包含更多资源

7/1

本帖子中包含更多资源

浏览过的版块