微塔监控突然报了

显示全部楼层 · 发表于 2007-10-7 13:58:37

删除到回收站时：
13时57分31秒:  [C:\Recycled\Dc2542.exe] 发现病毒,已经删除
13时57分31秒:  [C:\Recycled\Dc2542.exe] 发现病毒,已经删除

上毒网时：
13时55分22秒:  [C:\Documents and Settings\Administrator\Local Settings\Temp\wzesxeam.exe] 发现病毒,已经删除

显示全部楼层 · 发表于 2007-10-7 13:59:14

C:\ABC\wzesxeam.rar:\wzesxeam.exe - 特征码 'Trojan-Spy.Win32.Agent.pn' 被发现

显示全部楼层 · 发表于 2007-10-7 14:00:44

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WZESXEAM.EXE
木马程序生成以下文件:
1) D:\MYPLAYER.COM
2) C:\WINDOWS.0\SYSTEM\ALXRES071004.EXE
3) C:\WINDOWS.0\SYSTEM32\INF\SCRSYS071004.SCR
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-10-7 14:06:15

LS的也喜欢喜羊羊？

显示全部楼层 · 发表于 2007-10-7 14:07:04

Scanning Log
Version of virus signature database: 2576 (20071007)
Date: 7.10.2007 Time: 14:06:43
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\wzesxeam.rar
C:\Documents and Settings\Don johnson\桌面\wzesxeam.rar » RAR » wzesxeam.exe - probably a variant of Win32/Genetik trojan
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 14:06:44 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-10-7 14:16:23

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\wzesxeam.rar'
C:\Users\morgan\Documents\
  wzesxeam.rar
[0] Archive type: RAR
--> wzesxeam.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-7 14:17:25

rs挂了

显示全部楼层 · 发表于 2007-10-7 14:23:12

deleted: virus Virus.Win32.AutoRun.sh File: C:\Documents and Settings\Owner\×ÀÃæ\wzesxeam.rar/wzesxeam.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-10-7 14:27:42

显示全部楼层 · 发表于 2007-10-7 14:35:48

卡巴7
检测到：病毒 Virus.Win32.AutoRun.sh URL: http://www.kafan.cn/bbs/attachme ... xe//PE_Patch//UPack

[病毒样本] 微塔监控突然报了

本帖子中包含更多资源

浏览过的版块