好像还是qq尾巴的东西

显示全部楼层 · 发表于 2007-10-12 20:24:56

这一套木马群比孤独的全多了

显示全部楼层 · 发表于 2007-10-12 20:27:18

木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MYPLAY.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MYPLAYER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
、
怎么直接报未知木马

显示全部楼层 · 发表于 2007-10-12 20:28:36

BD一个....

显示全部楼层 · 发表于 2007-10-12 20:30:25

D:\myplay.exe - probably infected with MULDROP.Trojan
DRWEB4.44 启发

显示全部楼层 · 发表于 2007-10-12 20:30:49

RX19.44.42未查杀。

显示全部楼层 · 发表于 2007-10-12 21:12:48

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 505
Paranoia Database - 10371
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\myplay.exe - Suspected MalwareDetector:Generic.PSW.4
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\myplayer.exe - Suspected MalwareDetector:Generic.PSW.4

2 Files scanned
0 Infected files found
2 Suspected files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-12 21:16:41

KAV7两个：
已删除：木马程序 Trojan-Spy.Win32.Agent.afl 文件　: C:\Users\user\Desktop\myplay.zip/myplay.exe//PE_Patch//UPack
已删除：病毒 Virus.Win32.AutoRun.tp 文件　: C:\Users\user\Desktop\myplay.zip/myplayer.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-10-12 21:56:50

C:\Documents and Settings\Don johnson\桌面\myplay.zip » ZIP » myplay.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\myplay.zip » ZIP » myplayer.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\myplay.zip - probably a variant of Win32/Genetik trojan - deleted - quarantined

显示全部楼层 · 发表于 2007-10-12 22:11:03

Result: 2 malware found
Trojan-Spy.Win32.Agent.afl (virus)
C:\Users\Administrator\Desktop\myplay.zip\myplay.exe
Virus.Win32.AutoRun.tp (virus)
C:\Users\Administrator\Desktop\myplay.zip\myplayer.exe

显示全部楼层 · 发表于 2007-10-12 23:14:45

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\myplay.zip'
C:\Users\morgan\Documents\
  myplay.zip
  myplay.zip:Zone.Identifier
[0] Archive type: ZIP
--> myplay.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> myplayer.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] 好像还是qq尾巴的东西

本帖子中包含更多资源

本帖子中包含更多资源