B5FD0B老毒更新，红伞挂

显示全部楼层 · 发表于 2007-9-22 13:18:58

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 190
Paranoia Database - 5489
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\soa.exe

C:\Documents and Settings\uhthn\Desktop\soa.exe - Suspicious of Trojan-PSW.Game.16

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-22 14:15:57

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description BehavesLike:Trojan.ShellStartup
Error code: -1603
Requested URL: /attachment.php?aid=130508
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-22 15:51:47

NOD32 MISS?

显示全部楼层 · 发表于 2007-9-22 20:34:40

已删除：木马程序 Trojan-PSW.Win32.WOW.xq 文件　: G:\9.22\soa.rar/soa.exe//PE_Patch.PECompact//PecBundle//PECompact

显示全部楼层 · 发表于 2007-9-22 20:39:34

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.0.0
HC0.rlb = 2.8.9
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [SmartSearch] 在 I:\systeminfo\Publisher\UGuard\新建文件夹 (2)\soa.rar>>soa.exe//PEC//EPScan//DeepSmart 检测到 Generic.PSW
检测到了 1 个未知的恶意程序，请上报。
任务扫描完成。共耗费的时间：0-00-00 00:00:00:0078，共扫描的文件数量：2，共扫描到的威胁数量：1，威胁率：0.5

显示全部楼层 · 发表于 2007-9-24 16:08:17

用事实说话，焦点访谈。。。。。。。。

[病毒样本] B5FD0B老毒更新，红伞挂

本帖子中包含更多资源