4055a7，国产三大继续同挂！

欠妳緈諨

wangjay1980

detected: riskware not-a-virus:Downloader.Win32.WinFixer.u        URL: http://bbs.kafan.cn/attachment.php?aid=126746//update1.exe

moonsilver

微点跟着挂

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\update1.rar'
C:\Documents and Settings\Administrator\My Documents\
  update1.rar
    [0] Archive type: RAR
    --> update1.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

风野胤

Scanning Log
NOD32 version 2523 (20070912) NT
Command line: R:\update1.rar
Checking CRC of NOD32.EXE: Status OK
Scanning memory: Not performed (option disabled)
Error occurred while scanning MBR sector of the 2.  ?
?physical disk. Error reading sector.
Date: 12.9.2007  Time: 12:29:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: R:\update1.rar
R:\update1.rar ?RAR ?update1.exe - a variant of Win32/PSW. ?
?Lineage.ACN trojan
Number of scanned files: 1
Number of threats found: 1
Time of completion: 12:29:43 Total scanning time: 3 sec  ?
?(00:00:03)

1688388728

检测到：风险软件 not-a-virus:Downloader.Win32.WinFixer.u        URL: http://bbs.kafan.cn/attachment.php?aid=126746//update1.exe

scottxzt

未知木马

ssy275

egin scan in 'C:\Documents and Settings\ssy\桌面\update1.rar'
C:\Documents and Settings\ssy\桌面\update1.rar
  [0] Archive type: RAR
  --> update1.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      A backup was created as '474b7715.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

capsshift

原帖由 moonsilver 于 2007-9-12 12:19 发表
微点跟着挂

什么意思

程序:
C:\BOOT\UPDATE1.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WEB\PRINTERS\IMAGES\WUHAN.EXE
2) C:\WINDOWS\WEB\PRINTERS\IMAGES\WUHAN.DLL
是否删除木马程序及其衍生物?

这样也叫挂了？喜欢瑞星不能喜欢到这个地步。

wkwx

国产微点真的不错哦！