更新X2[A98D46 9B93C8]

显示全部楼层 · 发表于 2007-10-6 14:52:31

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\JSHELP.EXE
是否删除木马程序及其衍生物?

居然生成个注册表导入

显示全部楼层 · 发表于 2007-10-6 14:54:36

dll miss
Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\js.rar'
C:\Users\morgan\Documents\
  js.rar
[0] Archive type: RAR
--> jshelp.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> jsshow.dll
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-6 14:55:17

2007-10-6 14:54:51 1191653691 Administrator 2456 Sign of "Win32:Delf-FBC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\js.rar\jshelp.exe" file.
2007-10-6 14:54:56 1191653696 Administrator 2456 Sign of "Win32:Delf-FBC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\js.rar\jsshow.dll" file.

显示全部楼层 · 发表于 2007-10-6 14:56:54

adware

显示全部楼层 · 发表于 2007-10-6 14:57:48

又是广告

显示全部楼层 · 发表于 2007-10-6 14:58:56

2007-10-6 15:02:14 Real-time file system protection file C:\Documents and Settings\Administrator\Application Data\IDM\DwnlData\a\136158_8612\136158 a variant of Win32/Adware.MoKeAD application deleted - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\Internet Download Manager\IDMan.exe.

显示全部楼层 · 发表于 2007-10-6 16:06:44

rs挂了

显示全部楼层 · 发表于 2007-10-6 16:11:53

D:\anti\js.rar >>RAR >>jshelp.exe - Win32/Adware.MoKeAD 应用程序的变种
D:\anti\js.rar >>RAR >>jsshow.dll - Win32/Adware.MoKeAD 应用程序的变种
已扫描的文件数目：2
已发现的病毒数目：2
广告也变种

显示全部楼层 · 发表于 2007-10-6 16:43:29

duba pass

[病毒样本] 更新X2[A98D46 9B93C8]

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块