再来一个

显示全部楼层 · 发表于 2007-9-10 11:44:08

6be56d6f48cde9a72bfd0bd4da8457e9

显示全部楼层 · 发表于 2007-9-10 11:46:47

报的名称和前面一个一样。。。。
Scanning Log
NOD32 version 2517 (20070910) NT
Command line: R:\WinSys64.zip
Checking CRC of NOD32.EXE: Status OK
Scanning memory: Not performed (option disabled)
Error occurred while scanning MBR sector of the 2.  ?
?physical disk. Error reading sector.
Date: 10.9.2007  Time: 11:46:04
Anti-Stealth technology is enabled.
Scanned disks, folders and files: R:\WinSys64.zip
R:\WinSys64.zip ?ZIP ?WinSys64.Sys - probably a variant  ?
?of Win32/AutoRun.Q worm
Number of scanned files: 1
Number of threats found: 1
Time of completion: 11:46:04 Total scanning time: 0 sec  ?
?(00:00:00)

显示全部楼层 · 发表于 2007-9-10 11:49:45

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\WinSys64.zip'
C:\Documents and Settings\Administrator\My Documents\
  WinSys64.zip
[0] Archive type: ZIP
--> WinSys64.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-10 12:13:02

瑞星没反应..

显示全部楼层 · 发表于 2007-9-10 12:19:00

Name: Trojan.PWS.QQGame.Gen
Type: Mutant

Description:

Files:
d:\virus\winsys64.sys

显示全部楼层 · 发表于 2007-9-10 14:06:28

F:\9.10\WinSys64.zip >>ZIP >>WinSys64.Sys - 可能是 Win32/AutoRun.Q 蠕虫的一个变种

显示全部楼层 · 发表于 2007-9-10 14:48:01

HEUR/Malware

显示全部楼层 · 发表于 2007-9-10 15:36:11

微点：
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINSYS64.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-9-10 17:28:56

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4108
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\WinSys64.Sys

C:\Documents and Settings\uhthn\Desktop\WinSys64.Sys - Suspicious of Win32.Trojan-PSW.QQPass.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] 再来一个

本帖子中包含更多资源