U盘的

显示全部楼层 · 发表于 2007-10-12 11:58:27

应该都杀得出！

显示全部楼层 · 发表于 2007-10-12 12:04:28

已知
Begin scan in 'C:\Documents and Settings\Administrator\桌面\auto.rar'
C:\Documents and Settings\Administrator\桌面\auto.rar
  [0] Archive type: RAR
  --> auto.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.554 Backdoor server programs
  --> grtytwar.exe
   [DETECTION] Is the Trojan horse TR/Agent.358ee5

显示全部楼层 · 发表于 2007-10-12 12:06:09

Worm name:Worm.Win32.Agent.cax
program(s):
D:\TDDOWNLOAD\AUTO.EXE
Is worm program(s)!
Successful in stopping running, Delete the file?

Worm name:Worm.Win32.VB.mk
program(s):
D:\TDDOWNLOAD\GRTYTWAR.EXE
Is worm program(s)!
Successful in stopping running, Delete the file?

显示全部楼层 · 发表于 2007-10-12 12:27:07

C:\Documents and Settings\Don johnson\桌面\auto.rar >>RAR >>auto.exe - Win32/TrojanDownloader.Flux 木马的变种
C:\Documents and Settings\Don johnson\桌面\auto.rar >>RAR >>autorun.inf - INF/Autorun 病毒
C:\Documents and Settings\Don johnson\桌面\auto.rar >>RAR >>grtytwar.exe - Win32/AutoRun.E 蠕虫

显示全部楼层 · 发表于 2007-10-12 12:43:07

deleted: Trojan program Backdoor.Win32.Agent.ahj File: C:\Documents and Settings\Owner\×ÀÃæ\auto.rar/auto.exe
deleted: virus Virus.Win32.AutoRun.br File: C:\Documents and Settings\Owner\×ÀÃæ\auto.rar/grtytwar.exe//UPX

[ 本帖最后由 wangjay1980 于 2007-10-12 14:59 编辑 ]

显示全部楼层 · 发表于 2007-10-12 13:15:05

NIS2008
Unresolved Threats:
W32.Popwin
Virus ID: 19396
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
State: Remove Failed
-----------
1 File
[auto.exe] inside of [c:\users\m\desktop\auto.rar] - Infected

Trojan.Adclicker
Virus ID: 34860
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
State: Remove Failed

显示全部楼层 · 发表于 2007-10-12 13:47:20

微点砍掉

显示全部楼层 · 发表于 2007-10-12 14:06:04

结果: 发现2个恶意软件
Backdoor.Win32.Agent.ahj (病毒)
F:\du\auto.rar\auto.exe
Virus.Win32.AutoRun.br (病毒)
F:\du\auto.rar\grtytwar.exe

显示全部楼层 · 发表于 2007-10-12 14:13:18

2007-10-12 14:12:42 1192169562 Administrator 3856 Sign of "Win32:Agent-GPD [Trj]" has been found in "D:\Downloads\auto.rar\auto.exe\[NsPack]\[Embedded#4010]\[NsPack]" file.
2007-10-12 14:12:46 1192169566 Administrator 3856 Sign of "Win32:Autorun-AX" has been found in "D:\Downloads\auto.rar\grtytwar.exe\[UPX]" file.

显示全部楼层 · 发表于 2007-10-12 15:49:21

[Scan path] C:\Documents and Settings\Administrator\桌面\auto.rar
>>C:\Documents and Settings\Administrator\桌面\auto.rar\auto.exe infected with Trojan.Popwin
>C:\Documents and Settings\Administrator\桌面\auto.rar\autorun.inf - Ok
>>C:\Documents and Settings\Administrator\桌面\auto.rar\grtytwar.exe infected with Win32.HLLW.Autoruner.167
C:\Documents and Settings\Administrator\桌面\auto.rar - archive contains infected objects

[病毒样本] U盘的

本帖子中包含更多资源

本帖子中包含更多资源