9F057A

显示全部楼层 · 发表于 2007-9-25 12:01:54

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\Tonger2003.zip'
C:\Users\morgan\Documents\
  Tonger2003.zip
[0] Archive type: ZIP
--> sys232.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-25 12:07:27

卡巴上报.

显示全部楼层 · 发表于 2007-9-25 12:21:32

微点砍掉

显示全部楼层 · 发表于 2007-9-25 13:28:50

2007-9-25 13:26:42 未扫描（文件已加密） WATERQOO\冼广明 F:\maxthon2.0\Maxthon.exe I:\Temporary Internet Files\Content.IE5\IDWXYHUP\viewthread[1].php\viewthread[1]
2007-9-25 13:27:58 已删除 (清理失败，因为该检测项不可清理)
买咖啡

显示全部楼层 · 发表于 2007-9-25 13:39:30

F:\9.25\Tonger2003.zip >>ZIP >>sys232.exe - 可能是 Win32/Genetik 木马的一个变种

显示全部楼层 · 发表于 2007-9-26 15:18:27

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 243
Paranoia Database - 5802
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\sys232.exe

C:\Documents and Settings\uhthn\Desktop\sys232.exe - Infected with SDB:MalwareSpy.Trojan-Downloader.Agent.ue - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-26 18:38:04

已删除：木马程序 Trojan-Downloader.Win32.Flux.k 文件: F:\9.26\Tonger2003.zip/sys232.exe

显示全部楼层 · 发表于 2007-9-27 13:28:48

KV2008

显示全部楼层 · 发表于 2007-9-27 16:31:07

病毒: Trojan-Downloader.Win32.Flux.k
文件: Tonger2003[1].zip
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\O938PYOI
进程: Maxthon.exe

[病毒样本] 9F057A

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源