[1e779f;077f9a]国杀全过

显示全部楼层 · 发表于 2007-9-12 09:26:48

1e779f022da056792981ce2efe704324 8EBCF7A8.EXE
077f9ac25ec3adac18c0287c7fad681d 7A407AF8.DLL

显示全部楼层 · 发表于 2007-9-12 09:31:53

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/8EBCF7A8.EXE//ASPack
detected: Trojan program Backdoor.Win32.Agent.bqa File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/7A407AF8.DLL

显示全部楼层 · 发表于 2007-9-12 09:33:09

卡巴点的时候 WEB拦截了...

显示全部楼层 · 发表于 2007-9-12 09:55:54

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\桌面.rar'
C:\Documents and Settings\Administrator\My Documents\
  桌面.rar
[0] Archive type: RAR
--> 8EBCF7A8.EXE
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
--> 7A407AF8.DLL
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-12 10:00:18

Scan performed at: 2007-9-12 9:59:38
Scanning Log
NOD32 version 2522 (20070911) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\桌面.rar

Date: 12.9.2007 Time: 09:59:41
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\桌面.rar
D:\Documents and Settings\EKINCHENG\桌面\桌面.rar ?RAR ?8EBCF7A8.EXE - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\桌面.rar ?RAR ?7A407AF8.DLL - probably a variant of Win32/Genetik trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 09:59:41 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-12 10:10:03

费尔报壳

显示全部楼层 · 发表于 2007-9-12 10:13:33

瑞星2008飘过.

显示全部楼层 · 发表于 2007-9-12 10:58:18

果然咖啡杀=。=

显示全部楼层 · 发表于 2007-9-12 11:15:23

显示全部楼层 · 发表于 2007-9-12 11:34:19

瑞星系统加固发现程序文件访问违规

应用程序信息
文件名：C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\8EBCF7A8.EXE
版本：
厂商：
PID: 3780    TID: 3784

动作目标：C:\WINDOWS\SYSTEM32\CE258734.EXE
动作：修改C:\WINDOWS\SYSTEM32\CE258734.EXE

规则信息
名称：系统目录
描述：
   %Windir%\system32是系统重要目录。恶意程序可能会通过创建、替换或修改该目录下的正常可执行程序，达到启动的目的。

文件路径：
   %Windir%\system32

2007-9-12 11:31:48

[病毒样本] [1e779f;077f9a]国杀全过

本帖子中包含更多资源

本帖子中包含更多资源