126fba，过红伞！

显示全部楼层 · 发表于 2007-9-16 12:29:49

红伞过了

显示全部楼层 · 发表于 2007-9-16 12:30:47

detected: Trojan program Trojan-PSW.Win32.OnLineGames.cyi URL: http://bbs.kafan.cn/attachment.p ... PX//PE_Patch.MaskPE

显示全部楼层 · 发表于 2007-9-16 12:31:57

eset

D:\Documents and Settings\Administrator.3F92676F23A94B8\桌面\ghost.rar » RAR » ghost.exe » RAR » 2.bat - BAT/KillAV.EC trojan

显示全部楼层 · 发表于 2007-9-16 12:32:38

C:\ABC\ghost.rar:\ghost.exe\1.exe - 特征码 'Trojan.Popwin.R' 被发现
C:\ABC\ghost.rar:\ghost.exe\2.bat
C:\ABC\ghost.rar:\ghost.exe\2.vbs - 特征码 'Trojan.VBS.Runner.h' 被发现
C:\ABC\ghost.rar:\ghost.exe - 特征码 'Trojan.Popwin.R' 被发现
C:\ABC\ghost.rar

显示全部楼层 · 发表于 2007-9-16 12:32:45

蜘蛛杀！

显示全部楼层 · 发表于 2007-9-16 12:33:34

avast pass

显示全部楼层 · 发表于 2007-9-16 13:20:24

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 5143
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\ghost.exe

C:\Documents and Settings\uhthn\Desktop\ghost.exe\1.exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\ghost.exe\2.bat - OK
C:\Documents and Settings\uhthn\Desktop\ghost.exe\2.vbs - Suspicious file
C:\Documents and Settings\uhthn\Desktop\ghost.exe - Suspicious file

4 Files scanned
0 Infected files found
3 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-16 13:31:40

原帖由 tracydk 于 2007-9-16 12:33 发表
avast pass

确实pass了

显示全部楼层 · 发表于 2007-9-16 13:38:23

2007-9-16 13:37:32 Scanning Log
2007-9-16 13:37:32 Version of virus signature database: 2532 (20070916)
2007-9-16 13:37:32 Date: 16.9.2007 Time: 13:37:32
2007-9-16 13:37:32 Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\ghost.rar
2007-9-16 13:37:37 D:\Documents and Settings\EKINCHENG\桌面\ghost.rar » RAR » ghost.exe » RAR » 1.exe - a variant of Win32/PSW.Lineage.ACN trojan
2007-9-16 13:37:37 D:\Documents and Settings\EKINCHENG\桌面\ghost.rar » RAR » ghost.exe » RAR » 2.bat - BAT/KillAV.EC trojan
2007-9-16 13:37:37 Number of scanned files: 5
2007-9-16 13:37:37 Number of threats found: 2
2007-9-16 13:37:37 Time of completion: 13:37:37 Total scanning time: 5 sec (00:00:05)

显示全部楼层 · 发表于 2007-9-16 14:01:45

C:\Documents and Settings\lsy\桌面\ghost\ghost\1.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
C:\Documents and Settings\lsy\桌面\ghost\ghost\2.bat
   [DETECTION] Contains detection pattern of the batch virus BAT/Zyfore.AB

雨伞不会解包而已~

[病毒样本] 126fba，过红伞！

本帖子中包含更多资源