三个

显示全部楼层 · 发表于 2007-10-6 23:14:42

文件: C:\Documents and Settings\moonsilver\桌面\Ghost.pif
大小: 21035 字节
修改时间: 2007年6月18日, 10:23:58
MD5: 4E39CE05BD49A44016160A2AEE7BB7D0
SHA1: 128B7B66126C16FE3AB126D213F2D046D6440693
CRC32: 28A3779E
文件: C:\Documents and Settings\moonsilver\桌面\Limit.exe
大小: 557056 字节
文件版本: 1.00
修改时间: 2007年3月5日, 19:15:22
MD5: 55CFAB1D38369C1E8953CBE7BF15C7C8
SHA1: D0A5899B6F46C1DECF253FCB2E9498D90A5CADBF
CRC32: 3F65EBCE
文件: C:\Documents and Settings\moonsilver\桌面\RavMon.exe
大小: 49242 字节
修改时间: 2007年1月5日, 17:50:20
MD5: 385323CCDC790B3302B32120EF1DBE9A
SHA1: B52C8DF11F588026E379C5BF655F285B485B7D84
CRC32: 239BE615

显示全部楼层 · 发表于 2007-10-6 23:18:34

扫描进行于：2007-10-6 23:18:16
扫描日志
NOD32版本 2575 (20071006) NT
命令行： C:\Documents and Settings\user\桌面\桌面.rar

日期： 6.10.2007 时间：23:18:17
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\user\桌面\桌面.rar
C:\Documents and Settings\user\桌面\桌面.rar >>RAR >>Limit.exe - Win32/AutoRun.BZ 病毒
C:\Documents and Settings\user\桌面\桌面.rar >>RAR >>Ghost.pif - Win32/PSW.OnLineGames.NBR 木马
C:\Documents and Settings\user\桌面\桌面.rar >>RAR >>RavMon.exe - Win32/Agent.NAV 蠕虫
已扫描的文件数目：3
已发现的病毒数目：3
完成时间： 23:18:17 总扫描时间：0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-10-6 23:18:43

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\桌面.rar'
C:\Documents and Settings\Administrator\桌面\桌面.rar
  [0] Archive type: RAR
  --> Limit.exe
   [DETECTION] Is the Trojan horse TR/Autorun.E.1
  --> Ghost.pif
   [DETECTION] Is the Trojan horse TR/Autorun.BK
  --> RavMon.exe
   [DETECTION] Is the Trojan horse TR/Agent.Abt.3
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-6 23:21:44

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 23:21:44 2007-10-6

+ Scan result:

F:\Documents and Settings\kafan\桌面\桌面.rar/RavMon.exe -> Trojan.Agent.abt : No action taken.

::Report end

显示全部楼层 · 发表于 2007-10-6 23:32:50

detected: virus Virus.Win32.AutoRun.bz File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/Limit.exe
detected: virus Virus.Win32.AutoRun.ji File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/Ghost.pif
detected: Trojan program Trojan.Win32.Agent.abt File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/RavMon.exe//NPack

显示全部楼层 · 发表于 2007-10-6 23:33:24

显示全部楼层 · 发表于 2007-10-6 23:38:26

kv2008

http://bbs.kafan.cn/attachment.php?aid=136377->limit.exe    virus.autorun.r       2007-10-6 下午 11:35:21 已删除
http://bbs.kafan.cn/attachment.php?aid=136377->ghost.pif    trojan/diskautorun.if 2007-10-6 下午 11:35:22 已删除
http://bbs.kafan.cn/attachment.php?aid=136377->ravmon.exe    trojan/agent.bwp       2007-10-6 下午 11:35:22 已删除

显示全部楼层 · 发表于 2007-10-6 23:57:42

显示全部楼层 · 发表于 2007-10-7 00:07:29

光華三個

显示全部楼层 · 发表于 2007-10-7 00:19:45

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 326
Paranoia Database - 6879
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\Limit.exe - Infected Trojan.vb.a
C:\Documents and Settings\uhthn\Desktop\New Folder\Ghost.pif - Infected Win32.Virus.autorun.2
C:\Documents and Settings\uhthn\Desktop\New Folder\RavMon.exe - Suspected Trojan-Downloader.VB.1

3 Files scanned
2 Infected files found
1 Suspected files found
0 Files cured
2 Files deleted

[病毒样本] 三个

本帖子中包含更多资源

本帖子中包含更多资源