这个仙剑4木马大家可以杀吗?

显示全部楼层 · 发表于 2007-10-13 23:08:57

显示全部楼层 · 发表于 2007-10-13 23:28:05

LS的图不错我按照图找了现在电脑都没有那些东西了 MCAFEE本身带的规则直接就制止了建立的两个EXE文件.看来没中,不过最先执行还是把我时间改了~~奇怪的是没生成那文件怎么改的呵呵

显示全部楼层 · 发表于 2007-10-13 23:32:39

MCAFEE 沒有AD

所以，可能是病毒"訪問物理內存"後，過MCAFEE的FD

显示全部楼层 · 发表于 2007-10-13 23:36:57

那LS朋友这样的情况下要是其他没建立现在应该没什么问题吧 ?请赐教

显示全部楼层 · 发表于 2007-10-14 01:33:14

我上报给nod了

显示全部楼层 · 发表于 2007-10-14 01:52:21

现在可以杀了
楼主请升级病毒库

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=139284 is infected with Trojan-Clicker.Win32.VB.tr virus

显示全部楼层 · 发表于 2007-10-14 02:50:18

Result: 1 malware found
Trojan-Clicker.Win32.VB.tr (virus)
C:\Users\Administrator\Desktop\ÏÉ½£ÆæÏÀ´«ËÄ¾çÇé±¦µä.rar\ÏÉ½£ÆæÏÀ´«ËÄ¾çÇé±¦µä.exe
fs报了

显示全部楼层 · 发表于 2007-10-14 06:59:19

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=139284 is infected with Trojan-Clicker.Win32.VB.tr virus

显示全部楼层 · 发表于 2007-10-14 07:02:07

還有，他利用regsvr32.exe做一些事情！

我是不知道他要做什麼！

显示全部楼层 · 发表于 2007-10-14 09:00:33

Start of the scan: Sunday, 14 October, 2007  09:00

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\仙剑奇侠传四剧情宝典.rar'
C:\Documents and Settings\tim\桌面\仙剑奇侠传四剧情宝典.rar
  [0] Archive type: RAR
  --> ÏÉ½£ÆæÏÀ´«ËÄ¾çÇé±¦µä.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    A backup was created as 'a058bc6f.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: Sunday, 14 October, 2007  09:00
Used time: 00:01 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

[病毒样本] 这个仙剑4木马大家可以杀吗?

回复 12楼 32180224 的帖子

回复 14楼 32180224 的帖子

浏览过的版块