[F6539E]铁壳又杀了

显示全部楼层 · 发表于 2007-10-1 02:46:15

Symantec Trojan.Daekom
AntiVir HEUR/Malware
Rising Trojan.Win32.Agent.zcx
Webwasher-Gateway Heuristic.Malware
VBA32 MalwareScope.Trojan-PSW.Game.16
Norman Smalltroj.gen7
Avast!  Win32:Delf-FBC[Trj]
VirusBuster Trojan.PWS.Agent.JBN.Gen
NOD32 a variant of Win32/Adware.MoKeAD
F-Secure  Smalltroj.gen7
Ikarus  not-a-virus:AdWare.Win32.Agent.bs
Kaspersky  not-a-virus:AdWare.Win32.Agent.li

★Changes to filesystem
☆1.Creates file C:\arun.reg.
☆2.Deletes file c:\arun.reg.
★Process&window info
☆ 1.Creates an event called .
☆2.Creates a mutex {ECCBF003-3D4F-49B9-84DD-38234F8D07AB}.

显示全部楼层 · 发表于 2007-10-1 08:49:17

Virus: not-a-virus:AdWare.Win32.Agent.li

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-10-1 09:10:24

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\jshelp.rar'
C:\Documents and Settings\tim\桌面\jshelp.rar
  [0] Archive type: RAR
  --> jshelp.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    A backup was created as '47684960.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

[病毒样本] [F6539E]铁壳又杀了