vip[605fcd]

显示全部楼层 · 发表于 2007-10-6 15:33:19

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\vip.rar'
C:\Documents and Settings\Administrator\桌面\vip.rar
  [0] Archive type: RAR
  --> vip.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-6 15:44:16

2007-10-6 15:44:07 1191656647 Administrator 2796 Sign of "Win32:Pakes-EO [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\vip.rar\vip.exe" file.

显示全部楼层 · 发表于 2007-10-6 15:49:06

ESS。。。。。

显示全部楼层 · 发表于 2007-10-6 15:58:11

detected: virus Heur.Trojan.Generic File: C:\Documents and Settings\Owner\×ÀÃæ\vip.rar/vip.exe//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE

显示全部楼层 · 发表于 2007-10-6 15:59:56

卡巴 7.0.0.125 高启发

已删除: 病毒 Heur.Trojan.Generic 文件: F:\病毒样本\vip.rar/vip.exe//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE

有点奇怪，卡巴以前启发的是隔离的，今天怎么直接给删除了。。。
以前还报是变种（或修改），今天都没了，我得重新看看启发引擎的版本。

显示全部楼层 · 发表于 2007-10-6 16:06:23

rs挂了

显示全部楼层 · 发表于 2007-10-6 16:40:05

The requested URL http://bbs.kafan.cn/attachment.php?aid=136171 is infected with Heur.Trojan.Generic virus

显示全部楼层 · 发表于 2007-10-6 16:41:45

2007-10-6 16:41:35 Real-time file system protection file C:\Documents and Settings\Administrator\桌面\vip\vip.exe a variant of Win32/Delf.NDL worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2007-10-6 19:20:56

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 325
Paranoia Database - 6878
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\vip.exe

C:\Documents and Settings\uhthn\Desktop\vip.exe - Suspected MalwareDetector:Win32.Generic.PSW.16

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted

[病毒样本] vip[605fcd]

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块