2个遗漏的[CEDD89 222E16]

显示全部楼层 · 发表于 2007-9-30 23:15:10

[Found possible virus] < (damaged, not disinfectable)> C:\ABC\2.zip->9(2).exe->(UPack)
[Found possible virus] < (damaged, not disinfectable)> C:\ABC\2.zip->13(2).exe->(UPack)
[Contains infected objects] C:\ABC\2.zip

Results:
Files: 1
Skipped files: 0
MBR/boot sectors checked: 0
Objects scanned: 3
Infected objects: 2
Files with errors: 0
Disinfected: 0
Running time: 00:01

显示全部楼层 · 发表于 2007-9-30 23:16:02

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2\9(2).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MSAVP.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2\13(2).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MSAVP.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-30 23:16:59

2个费尔都是启发

显示全部楼层 · 发表于 2007-9-30 23:18:41

detected: Trojan program Trojan-PSW.Win32.OnLineGames.dtc File: C:\Documents and Settings\Owner\×ÀÃæ\2.zip/9(2).exe//PE_Patch//UPack//#
detected: Trojan program Trojan-PSW.Win32.Lmir.bmv File: C:\Documents and Settings\Owner\×ÀÃæ\2.zip/13(2).exe//PE_Patch//UPack//#

显示全部楼层 · 发表于 2007-9-30 23:45:12

显示全部楼层 · 发表于 2007-10-1 00:01:58

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dtc 文件　: G:\Temp\2.zip/9(2).exe//PE_Patch//UPack//#
已删除：木马程序 Trojan-PSW.Win32.Lmir.bmv 文件　: G:\Temp\2.zip/13(2).exe//PE_Patch//UPack//#

显示全部楼层 · 发表于 2007-10-1 00:31:32

C:\Documents and Settings\uhthn\Desktop\9(2).exe - Infected with SDB:Trojan-PSW.OnLineGames.39 - Deleted
C:\Documents and Settings\uhthn\Desktop\13(2).exe - Infected with SDB:Trojan-PSW.OnLineGames.39 - Deleted

显示全部楼层 · 发表于 2007-10-1 01:33:58

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\2.zip'
C:\Users\morgan\Documents\
  2.zip
[0] Archive type: ZIP
--> 9(2).exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> 13(2).exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-1 02:33:57

Status       Quarantined
Target       G:\v\2.zip
                     Options
                                          , Requested action: Repair, Excluded extensions disabled,
                     Excluded objects disabled, Heuristics enabled, Sandbox enabled, Scan
                     archives

      Statistics       Details

                                          Files             Boot sectorsRegistry key

                     Scanned             4                      0                      0
                        Infected             2                      0                      0
                     Repaired             0                      0                      0
                     Renamed             0                      -                         -
                  Quarantined             1                      -                         -
                        Deleted             0                      -                      0

显示全部楼层 · 发表于 2007-10-1 05:09:33

两个都一样的动作

[病毒样本] 2个遗漏的[CEDD89 222E16]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源