主动防御来玩玩

Nblock

快运行  针对卡巴主动防御rk一支   卡巴现在可以处理  

ps 行为拦截器建议不要运行

[ 本帖最后由 Nblock 于 2007-9-28 13:37 编辑 ]

nvhaichina

驱逐舰不给下载 嘿嘿

capsshift

红伞报了。

Begin scan in 'C:\BOOT\kill.rar'
C:\BOOT\kill.rar
  [0] Archive type: RAR
  --> kill.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQpass.PL.4
      [INFO]      A backup was created as '47688f9e.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

Nerazzurri

红心王子

2007-9-28        13:23:13        1190956993        Administrator        3112        Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\kill.rar\kill.exe\[Embedded#BDLDR1]" file.  
2007-9-28        13:23:17        1190956997        Administrator        3112        Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\kill.rar\kill.exe\[Embedded#BYPASS]" file.  
2007-9-28        13:23:17        1190956997        Administrator        3112        Sign of "Win32:Agent-JKB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\kill.rar\kill.exe\[Embedded#BYPASSDLL]" file.  
2007-9-28        13:23:17        1190956997        Administrator        3112        Sign of "Win32:QQpass-FY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\kill.rar\kill.exe" file.

The EQs

Scan performed at: 2007-9-28 13:25:56
Scanning Log
NOD32 version 2556 (20070928) NT
Command line: C:\Documents and Settings\Don johnson\桌面\kill.rar
Operating memory - is OK

Date: 28.9.2007  Time: 13:25:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\kill.rar
C:\Documents and Settings\Don johnson\桌面\kill.rar ?RAR ?kill.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:25:59 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

capsshift

等会儿我用瑞星的主防来测试一下下
楼主，你能不能弄过新一点的，这个是入库了的。

[ 本帖最后由 capsshift 于 2007-9-28 13:31 编辑 ]

小邪邪

2007-9-28        13:31:23        
已由访问保护规则禁止E:\Downloads\test\kill\kill.exe        
C:\bdldr.sys        
防病毒标准保护:禁止远程创建/修改可执行文件和配置文件        
已阻止的操作: 创建

wangfeng66

文件 F:\kill.rar 受到 未查明的 NewHeur_PE 病毒 感染.
NOD32

solcroft