ik独家已知[ef1d1a]

显示全部楼层 · 发表于 2007-10-1 17:42:11

MicroVita AntiSpyware
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

OK  扫描完毕！

显示全部楼层 · 发表于 2007-10-1 17:44:45

微点不报列，风云报壳

显示全部楼层 · 发表于 2007-10-1 17:45:50

显示全部楼层 · 发表于 2007-10-1 17:54:27

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.1.0
HC0.rlb = 2.8.9
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发, 捆绑流,
任务扫描完成。共耗费的时间：0-00-00 00:00:00:0125，共扫描的文件数量：1，共扫描到的威胁数量：0，威胁率：0

...UNKNOWN...

http://download.baofeng.com/stormII/StormII-ppgou.exe
Downloader??

显示全部楼层 · 发表于 2007-10-1 18:25:12

nProtect  BehavesLike:Trojan.Downloader
Norman Sandbox: W32/Downloader
Ikarus  not-a-virus:AdWare.Win32.Cygo.a
Bitdefender  BehavesLike:Trojan.Downloader (suspected)
eSafe  Suspicious Trojan/Worm
F-Secure  W32/Downloader
Panda  Suspicious file

显示全部楼层 · 发表于 2007-10-1 18:38:59

TrustPort Antivirus On-Demand Scanner

   Status       Quarantined
   Target       G:\v\Storm.rar
                           Options
                                             , Requested action: Move to quarantine, Excluded extensions
                           disabled, Excluded objects disabled, Heuristics enabled, Sandbox enabled,
                           Scan archives

            Statistics       Details

         Path                                        Scan result             Virus name                   Action
               G:\v\Storm.rar=>Storm.e...  Suspected!             BehavesLike:Trojan.... Quarantine
               G:\v\Storm.rar                   Suspected!             BehavesLike:Trojan.... Quarantined

显示全部楼层 · 发表于 2007-10-1 20:52:19

pass

显示全部楼层 · 发表于 2007-10-1 21:53:02

红伞挂，运行

2007-10-01 21:48:54 运行应用程序操作:允许
进程路径:C:\Program Files\bblean\blackbox.exe
文件路径:D:\XIAOHAO\Storm\Storm.exe
触发规则:所有程序规则->*

然后就没了！！只是进程还在，用任务管理器砍掉。
莫非修改了我的注册表？？

显示全部楼层 · 发表于 2007-10-1 22:40:55

Storm.exe_ - Trojan-Downloader.Win32.Agent.dru

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

[病毒样本] ik独家已知[ef1d1a]

本帖子中包含更多资源

ESS Pass