过卡巴

显示全部楼层 · 发表于 2007-9-30 18:22:09

http://bbs.kaspersky.com.cn/view ... e%3D1&frombbs=1

Roboon：在卡巴一族也发了贴，工程师在解决中，大家可以去看下

显示全部楼层 · 发表于 2007-9-30 21:11:11

显示全部楼层 · 发表于 2007-9-30 22:31:39

Begin scan in 'D:\Backup\桌面\setup.rar'

End of the scan: 2007年9月30日  22:31
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-30 22:35:42

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SETUP.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\GDISERVER.EXE
2) C:\WINDOWS.0\SYSTEM32\GDISVC.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-30 22:56:53

用用EQ没没事事

显示全部楼层 · 发表于 2007-10-1 05:25:21

原帖由 wangjay1980 于 2007-9-30 16:30 发表
又是改时间，还有没有别的

既然奏效，一个就够了
另外发现瑞星真的快变成EQ了

显示全部楼层 · 发表于 2007-10-1 07:23:56

原帖由 wangjay1980 于 2007-9-30 15:00 发表
又是改时间，还有没有别的

關鍵不在"改时间"，而在第1張圖！

显示全部楼层 · 发表于 2007-10-1 08:54:57

Virus: Backdoor.Win32.VB.bne

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-10-1 09:09:16

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\setup.rar'
C:\Documents and Settings\tim\桌面\setup.rar
  [0] Archive type: RAR
  --> setup.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/VB.bne.1 Backdoor server programs
   [INFO]    A backup was created as '47744913.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-2 12:25:20

卡巴拦截了

[病毒样本] 过卡巴

强是强

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块