MD5: FF4A57 两个13C860

显示全部楼层 · 发表于 2007-9-10 10:21:23

卡6飘，微点杀。。。

[ 本帖最后由自由于 2007-9-10 10:24 编辑 ]

显示全部楼层 · 发表于 2007-9-10 10:23:04

detected: virus Heur.Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/WinFormA9.exe//UPack
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/DiskMan32.exe//PE_Patch.UPX

显示全部楼层 · 发表于 2007-9-10 10:48:57

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=125944 is infected with Heur.Downloader virus

显示全部楼层 · 发表于 2007-9-10 11:02:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\桌面.rar'
C:\Documents and Settings\Administrator\My Documents\
  桌面.rar
[0] Archive type: RAR
--> WinFormA9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> DiskMan32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-10 11:25:56

Scan performed at: 2007-9-10 11:25:23
Scanning Log
NOD32 version 2517 (20070910) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\桌面.rar

Date: 10.9.2007 Time: 11:25:24
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\桌面.rar
D:\Documents and Settings\EKINCHENG\桌面\桌面.rar ?RAR ?WinFormA9.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\桌面.rar ?RAR ?DiskMan32.exe - a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 11:25:25 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-9-10 11:41:00

驱逐舰飘

显示全部楼层 · 发表于 2007-9-10 14:05:53

F:\9.10\桌面.rar >>RAR >>WinFormA9.exe - 可能是 Win32/Genetik 木马的一个变种
F:\9.10\桌面.rar >>RAR >>DiskMan32.exe - Win32/PSW.OnLineGames.YA 木马的变种1

显示全部楼层 · 发表于 2007-9-10 17:24:19

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4108
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\DiskMan32.exe - Infected with PDB-2227 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\WinFormA9.exe - Infected with PDB-1853 Malware program - Deleted

2 Files scanned
2 Infected files found
0 Suspicious files found
0 Files cured
2 Files deleted

[病毒样本] MD5: FF4A57 两个13C860

本帖子中包含更多资源

浏览过的版块