开红伞刷毒网, 爽

显示全部楼层 · 发表于 2007-9-22 15:11:43

2007-9-22 15:11:26 1190445086 Administrator 2304 Sign of "Win32:Delf-FVX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\My_Documents.rar\dd.exe" file.

显示全部楼层 · 发表于 2007-9-22 15:21:09

我也去搜来玩一下

显示全部楼层 · 发表于 2007-9-22 15:44:39

C:\Documents and Settings\Administrator\桌面\My Documents.rar >>RAR >>dd.exe - 可能是 Win32/Genetik 木马的一个变种

显示全部楼层 · 发表于 2007-9-22 19:01:05

小红伞有这样的牛么？不知道对自动隐身病毒效果如何。

显示全部楼层 · 发表于 2007-9-22 20:28:26

已删除：木马程序 Trojan-Downloader.Win32.Baser.o 文件　: G:\9.22\My_Documents.rar/dd.exe

显示全部楼层 · 发表于 2007-9-22 21:13:28

C:\Documents and Settings\uhthn\Desktop\dd.exe - Infected with PDB:Win32.78b Malware program - Deleted

显示全部楼层 · 发表于 2007-9-22 22:22:13

2007-9-22 22:24:04 Real-time file system protection file F:\virus\My Docum23ents\dd.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: D:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2007-9-22 23:01:09

D:\Documents and Settings\EKINCHENG\桌面\My Documents.rar » RAR » dd.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\My Documents.rar » RAR » 9038[2].htm - is OK
D:\Documents and Settings\EKINCHENG\桌面\My Documents.rar » RAR » xp017[1].htm - is OK
D:\Documents and Settings\EKINCHENG\桌面\My Documents.rar - probably a variant of Win32/Genetik trojan - deleted - quarantined

显示全部楼层 · 发表于 2007-9-23 09:09:21

ca pass

显示全部楼层 · 发表于 2007-9-23 10:40:11

木马名称:Trojan.Win32.Genetik.cja

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DD.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] 开红伞刷毒网, 爽