d58361

显示全部楼层 · 发表于 2007-10-5 10:26:14

MicroVita AntiSpyware
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\FG[1]\FG[1].exe]
                  …………发现Spy！报告:[1]
文件信息:  大小:22960  MD5:d583614be14664da7c1c29b3f13bd944

文件数:1 病毒数:1  比重:1
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎
[2] 文件特征码引擎
[1] 文件启发式引擎

显示全部楼层 · 发表于 2007-10-5 10:27:58

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\FG[1].zip'
C:\Users\morgan\Documents\
  FG[1].zip
[0] Archive type: ZIP
--> FG[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-5 10:30:58

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\FG[1].zip/FG[1].exe//FSG

显示全部楼层 · 发表于 2007-10-5 10:34:21

文件 F:\FG[1].zip 受到未查明的 NewHeur_PE 病毒感染.

NOD32

显示全部楼层 · 发表于 2007-10-5 10:35:25

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 305
Paranoia Database - 6837
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\FG[1].exe

C:\Documents and Settings\uhthn\Desktop\FG[1].exe - Infected Trojan-PSW.prostor.a

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-10-5 10:47:56

大蜘蛛杀了

显示全部楼层 · 发表于 2007-10-5 12:53:08

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\FG[1].EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\PHFFG.DLL
2) C:\WINDOWS.0\SYSTEM32\FGSRV.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-10-5 12:55:29

2007-10-5 12:55:11 1191560111 SYSTEM 1304 Sign of "Win32:FGSpy [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=135528\FG[1].exe\[FSG]\[Embedded#FGSRV]\[UPX]" file.

显示全部楼层 · 发表于 2007-10-5 14:32:57

RX没反应哦。

[病毒样本] d58361

本帖子中包含更多资源

浏览过的版块