不知道怎么中的3个东西

显示全部楼层 · 发表于 2007-9-20 12:25:28

微点日了！！！！

显示全部楼层 · 发表于 2007-9-20 12:26:26

D:\Documents and Settings\EKINCHENG\桌面\305EFE49.rar - probably a variant of Win32/Genetik trojan - deleted - quarantined
D:\Documents and Settings\EKINCHENG\桌面\305EFE49.rar » RAR » 305EFE49.EXE - probably a variant of Win32/Genetik trojan]

显示全部楼层 · 发表于 2007-9-20 12:29:56

我用微点也是发现漏了不少东西进来
对他的信任度降低中、、、、、

显示全部楼层 · 发表于 2007-9-20 12:32:36

一分钟不到又报一个晕这个是什么病毒啊！！！！！！

显示全部楼层 · 发表于 2007-9-20 12:33:15

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\305EFE49.rar'
C:\Documents and Settings\Administrator\My Documents\
  305EFE49.rar
[0] Archive type: RAR
--> 305EFE49.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 305EFE49.DLL
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\yshield.rar'
C:\Documents and Settings\Administrator\My Documents\
  yshield.rar
[0] Archive type: RAR
--> yshield.sys

End of the scan: 2007年9月19日  21:33
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   5 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   2 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-20 12:34:04

应该都是一个东西吧。。

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\109.rar'
C:\Documents and Settings\Administrator\My Documents\
  109.rar
[0] Archive type: RAR
--> 109.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-20 12:34:54

原帖由 luckyjoy 于 2007-9-20 12:29 发表
我用微点也是发现漏了不少东西进来
对他的信任度降低中、、、、、

我还是信任微点的，，它毕竟是行为防御啊！！！！病毒不发作它就不报！！！！其实只要拦截到了就没事了。。

[ 本帖最后由 zlq7zj 于 2007-9-20 12:36 编辑 ]

显示全部楼层 · 发表于 2007-9-20 12:35:37

2007-09-20 12:34:36 文件保护(创建文件)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\305EFE49\305EFE49.EXE
文件路径:C:\WINDOWS\system32\F77B20D5.EXE
2007-09-20 12:34:36 应用程序保护(安装服务或者驱动)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\305EFE49\305EFE49.EXE
文件路径:C:\WINDOWS\system32\F77B20D5.EXE -k
2007-09-20 12:34:36 文件保护(创建文件)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\305EFE49\305EFE49.EXE
文件路径:C:\WINDOWS\system32\del.bat

显示全部楼层 · 发表于 2007-9-20 12:37:39

[ 本帖最后由欠你幸福于 2007-9-20 12:41 编辑 ]

显示全部楼层 · 发表于 2007-9-20 12:37:50

2007-09-20 12:37:24 文件保护(创建文件)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\109\109.exe
文件路径:C:\WINDOWS\system32\F77B20D5.EXE
2007-09-20 12:37:24 应用程序保护(安装服务或者驱动)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\109\109.exe
文件路径:C:\WINDOWS\system32\F77B20D5.EXE -k
2007-09-20 12:37:24 应用程序保护(安装服务或者驱动)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\109\109.exe
文件路径:C:\WINDOWS\system32\F77B20D5.EXE -k

[病毒样本] 不知道怎么中的3个东西

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块