两个更新[C44DBB CA38EE]

显示全部楼层 · 发表于 2007-10-2 11:22:46

广告也更新

显示全部楼层 · 发表于 2007-10-2 11:29:03

瑞星全过..

显示全部楼层 · 发表于 2007-10-2 11:34:41

2007-10-2 11:34:24 1191296064 Administrator 220 Sign of "Win32:Delf-FBC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本2.rar\jsshow.dll" file.
2007-10-2 11:34:29 1191296069 Administrator 220 Sign of "Win32:Delf-FBC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本2.rar\jshelp.exe" file.

显示全部楼层 · 发表于 2007-10-2 11:56:12

Scan performed at: 2007-10-2 11:55:32
Scanning Log
NOD32 version 2564 (20071002) NT
Command line: C:\Documents and Settings\Don johnson\桌面\样本2.rar
Operating memory - is OK

Date: 2.10.2007 Time: 11:55:35
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\样本2.rar
C:\Documents and Settings\Don johnson\桌面\样本2.rar ?RAR ?jsshow.dll - a variant of Win32/Adware.MoKeAD application
C:\Documents and Settings\Don johnson\桌面\样本2.rar ?RAR ?jshelp.exe - a variant of Win32/Adware.MoKeAD application
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 11:55:35 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-10-2 12:02:03

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\��2.rar'
C:\Users\morgan\Documents\
  ��2.rar
[0] Archive type: RAR
--> jsshow.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> jshelp.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-2 12:45:58

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\JSHELP.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-10-2 12:59:55

===================================================================================================
On-demand scanner 7.0.0.9

NSE revision 5.91.07
nvcbin.def revision 5.90.00 of 2007/09/28 15:46:54 (967863 variants)
nvcmacro.def revision 5.90.00 of 2007/09/25 15:36:51 (20411 variants)
Total number of variants: 988274
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: G:\
- Scanning system areas of drive: G:\
- Scanning files matching: G:\v\jshelp.exe
   47 ms G:\v\jshelp.exe                                           Trojan Smalltroj.gen7 ()
- File G:\v\jshelp.exe quarantined.
- File G:\v\jshelp.exe deleted.
- Scanning files matching: G:\v\jsshow.dll
   31 ms G:\v\jsshow.dll

===================================================================================================

The scanning started: 2007/10/02 12:59:47
            ended: 2007/10/02 12:59:47
Logged on as       : Administrator
on hostname       : C3EF58622174424

Scanning results:
Total number of files found..............................:    2
Number of files scanned..................................:    2
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-10-2 13:13:06

对象: jsshow.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\样本2.rar
Status: 可疑病毒
病毒: BehavesLike:Trojan.ShellStartup (BD 引擎)

显示全部楼层 · 发表于 2007-10-2 13:23:54

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.1.1
HC0.rlb = 2.8.9
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\新建文件夹\样本2.rar>>jshelp.exe 检测到 Downloader.Generic.b
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\新建文件夹\样本2.rar>>jsshow.dll 检测到 Downloader.Generic.b
检测到了 2 个未知的恶意程序，请上报。
任务扫描完成。共耗费的时间：0-00-00 00:00:01:0735，共扫描的文件数量：3，共扫描到的威胁数量：2，威胁率：0.66666667

[病毒样本] 两个更新[C44DBB CA38EE]

本帖子中包含更多资源