AV终结者病毒样本，edveokw.exe.ffltuai.exe,

sharkkong

卡巴斯基反病毒软件 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=136677 is infected with Trojan-Downloader.Win32.Small.fyc virus

残缺的唯美

The requested URL http://bbs.kafan.cn/attachment.php?aid=136677 is infected with Trojan-Downloader.Win32.Small.fyc virus

wangfeng66

C:\autorun.rar\edveokw.exe - infected with Win32.HLLW.Autoruner.origin

Archive contains an infected item

DRWEB4.44

鱼是一只我

kis 7 KILL
检测到：木马程序 Trojan-Downloader.Win32.Small.fyc        文件: C:\Documents and Settings\1111\桌面\autorun.rar/edveokw.exe

didi2050

蠕虫都查不出来的杀毒软件可以扔掉啦！

googlehack

病毒是很厉害，不运行就没事了。

marksu2006

够强强的的啊啊，，我在运行后，才启动启动的咖啡8.5，EQ，cpu100%,最后没没过过，，在在运动杀杀毒毒，，才才是是实在的的

[ 本帖最后由 marksu2006 于 2007-10-13 19:57 编辑 ]

IllusionWing

再发个监控的

UGuard Log (Digital Fox - gankeyu@126.com, cby) - AutoProtect Log
保护模块版本: 1.5.0
* 反Rootkit : 启动
* 反广告 : 启动
* 注册表监视 : 启动
* 行为分析 : 启动
* 关联分析 : 启动

edveokw.exe 试图建立autorun.inf。 - 允许
edveokw.exe 试图在关键位置创建文件。 (E:\Program Files\Common Files\Microsoft Shared\SKWPDXI.exe) - 允许
警报! 在 edveokw.exe 中发现恶意代码。 (Generic.AVKiller)
edveokw.exe 无法被终止。
SuperTerminator引擎已经启动。
edveokw.exe 被强制卸载，请在病毒清理后重新启动计算机。
关联分析已经启动。
E:\Program Files\Common Files\Microsoft Shared\SKWPDXI.exe 被删除。
E:\Documents and Settings\Administrator\桌面\样本\edveokw.exe 被隔离。

29159011

木马名称:Trojan-Downloader.Win32.Small.erj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\AUTORUN\EDVEOKW.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

timhas266

Start of the scan: Saturday, 13 October, 2007  19:27

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\樣本'
C:\Documents and Settings\tim\桌面\樣本\autorun.rar
  [0] Archive type: RAR
  --> edveokw.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '4784ac23.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Saturday, 13 October, 2007  19:27
Used time: 00:02 min

The scan has been done completely.

      1 Scanning directories
      4 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes