4fa53f江民杀

显示全部楼层 · 发表于 2007-9-14 21:31:29

AVAST不认识

显示全部楼层 · 发表于 2007-9-14 21:31:45

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\623.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MAODLXEI.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-14 21:32:11

nod32也不认识

显示全部楼层 · 发表于 2007-9-14 21:44:26

同上

显示全部楼层 · 发表于 2007-9-14 21:46:42

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=127660 is infected with Heur.Invader virus

显示全部楼层 · 发表于 2007-9-14 22:01:25

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4909
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\623.exe

C:\Documents and Settings\uhthn\Desktop\623.exe - Suspicious file

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-14 22:09:02

对象: 623.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\623.rar
Status: 已发现病毒
病毒: Backdoor.Small.CHY (BD 引擎)

显示全部楼层 · 发表于 2007-9-14 22:54:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\623.rar'
C:\Documents and Settings\Administrator\My Documents\
  623.rar
[0] Archive type: RAR
--> 623.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Small.CHY Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-15 07:23:32

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=127660 is infected with Backdoor.Win32.Small.cjt virus

[病毒样本] 4fa53f江民杀

本帖子中包含更多资源