诚章读书网挂马

显示全部楼层 · 发表于 2007-9-22 15:42:56

C:\ABC\355.rar:\355.exe - 特征码 'Trojan-PWS.Win32.QQPass.pb'

显示全部楼层 · 发表于 2007-9-22 15:46:02

2007-9-22 15:45:50 1190447150 Administrator 3452 Sign of "Win32:Delf-FYB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\355.rar\355.exe\[UPX]

显示全部楼层 · 发表于 2007-9-22 15:49:46

R:\355.rar » RAR » 355.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2007-9-22 15:54:11

detected: virus Virus.Win32.AutoRun.hw File: C:\Documents and Settings\Owner\×ÀÃæ\355.rar/355.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-9-22 16:08:45

瑞星，微点干掉

显示全部楼层 · 发表于 2007-9-22 17:44:34

MicroVita AntiSpyware
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\355\355.exe]
                  …………发现Spy！报告:[2]
文件信息:  大小:18944  MD5:d4364b855c04034d3c418ab2254a400b

文件数:1 病毒数:1  比重:1
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎
[2] 文件特征码引擎
[1] 文件启发式引擎

显示全部楼层 · 发表于 2007-9-22 17:46:49

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description Win32.Worm.Winko.J
Error code: -1602
Requested URL: /attachment.php?aid=130678
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-22 20:30:30

已删除：病毒 Virus.Win32.AutoRun.hw 文件　: G:\9.22\355.rar/355.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-9-22 21:18:53

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 198
Paranoia Database - 5514
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\355.exe

C:\Documents and Settings\uhthn\Desktop\355.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] 诚章读书网挂马

本帖子中包含更多资源