挖掘[F00F5C]

显示全部楼层 · 发表于 2007-9-30 21:17:03

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=BehavesLike:Win32.Malware

显示全部楼层 · 发表于 2007-9-30 21:42:45

已删除：病毒 Virus.Win32.AutoRun.qj 文件: F:\9.30\IEXPLORE.zip/IEXPLORE.exe//ASPack

显示全部楼层 · 发表于 2007-9-30 23:12:05

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\IEXPLORE.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:1772
远端地址:218.16.120.253(广东)
远端端口:80
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\0LIVSLM3\QQ[1].EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\「开始」菜单\程序\启动\QQ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

漏杀东西

显示全部楼层 · 发表于 2007-10-1 00:22:56

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 279
Paranoia Database - 6300
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\IEXPLORE.exe - Infected with SDB:Win32.Trojan-Dropper.Small.1 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\unpack.exe - Infected with SDB:Win32.Trojan-Dropper.Small.1 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\unpack_.exe - Infected with SDB:Win32.Trojan-Dropper.Small.1 - Deleted

3 Files scanned
3 Infected files found
0 Suspicious files found
0 Files cured
3 Files deleted

显示全部楼层 · 发表于 2007-10-1 01:26:23

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\unpack.rar'
C:\Users\morgan\Documents\
  unpack.rar
[0] Archive type: RAR
--> unpack.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/Dumped). Please verify the origin of the file
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Users\morgan\Documents\unpack_.rar'
C:\Users\morgan\Documents\
  unpack_.rar
[0] Archive type: RAR
--> unpack_.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-1 05:17:34

显示全部楼层 · 发表于 2007-10-1 07:35:09

显示全部楼层 · 发表于 2007-10-1 07:41:31

[病毒样本] 挖掘[F00F5C]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源