[MD5: D41D8C 96BEA1 936590 F87569]

显示全部楼层 · 发表于 2007-10-16 16:34:24

KIS7报两个
已删除：木马程序 Trojan-PSW.Win32.WOW.zu 文件: D:\新建文件夹\新建文件夹\样本.rar/love11.exe//UPack
已删除：木马程序 Trojan-Dropper.Win32.Agent.cfk 文件: D:\新建文件夹\新建文件夹\样本.rar/love15.exe//UPX

显示全部楼层 · 发表于 2007-10-16 16:38:04

deleted: Trojan program Trojan-PSW.Win32.WOW.zu File: C:\Documents and Settings\acer\Desktop\Ñù±¾.rar/love11.exe//UPack
deleted: Trojan program Trojan-Dropper.Win32.Agent.cfk File: C:\Documents and Settings\acer\Desktop\Ñù±¾.rar/love15.exe//UPX

显示全部楼层 · 发表于 2007-10-16 16:41:07

MicroVita AntiSpyware
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

[C:\Documents and Settings\Administrator\桌面\Virus\样本.rar]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\Virus\样本.rar]
                  …………引擎[2]发现病毒:Win32.F/S.ByDwing
OK  扫描完毕！

显示全部楼层 · 发表于 2007-10-16 16:54:21

微点全杀

时间处理结果木马名称木马进程名木马文件创建者
2007-10-16 16:52:30 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX04.010\LOVE15.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2007-10-16 16:52:27 处理成功未知间谍软件 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX04.010\LOVE11.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2007-10-16 16:52:27 处理成功未知木马 C:\WINDOWS\SYSTEM32\WECSVC.DLL C:\WINDOWS\TEMP\KAVTEM.DLL
2007-10-16 16:52:26 处理成功未知木马 C:\WINDOWS\SYSTEM32\DLLCACHE\QMGR.DLL C:\WINDOWS\TEMP\KAVTEM.DLL
2007-10-16 16:52:25 处理成功未知木马 C:\WINDOWS\SYSTEM32\QMGR.DLL C:\WINDOWS\TEMP\KAVTEM.DLL
2007-10-16 16:52:23 处理成功未知木马 C:\WINDOWS\TEMP\KAVTEM.DLL C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX01.341\LOVE15.EXE
2007-10-16 16:52:22 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX01.341\LOVE15.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2007-10-16 16:52:15 处理成功未知间谍软件 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX02.733\LOVE11.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2007-10-16 16:52:01 处理成功未知间谍软件 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX01.341\LOVE11.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2007-10-16 16:51:59 处理成功未知间谍软件 C:\RECYCLER\OW.DLL C:\RECYCLER\OW.EXE
2007-10-16 16:51:57 处理成功未知间谍软件 C:\RECYCLER\OW.EXE C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.246\LOVE11.EXE
2007-10-16 16:51:57 处理成功未知间谍软件 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.246\LOVE11.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE

显示全部楼层 · 发表于 2007-10-16 18:17:39

Result: 1 malware found
Trojan-PSW.Win32.WOW.zu (virus)
C:\Users\Administrator\Desktop\Ñù±¾.rar\love11.exe

显示全部楼层 · 发表于 2007-10-16 18:39:43

C:\��.rar\love11.exe - infected with Trojan.PWS.Gamania.5078

Archive contains an infected item

DRWEB 4.44 暂时只报了一个

显示全部楼层 · 发表于 2007-10-16 19:14:27

2007-10-16 19:12:54 1192533174 Administrator 2644 Sign of "Win32:Delf-FKO [Trj]" has been found in "D:\Downloads\样本.rar\love11.exe\[Upack]\[Embedded#XX]" file.

显示全部楼层 · 发表于 2007-10-16 20:23:58

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 557
Paranoia Database - 10503
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\love7.exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\love11.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder\love15.exe - Suspected MalwareDetector:Win32.Generic.PSW.1
C:\Documents and Settings\uhthn\Desktop\New Folder\testDow.exe - OK

4 Files scanned
0 Infected files found
2 Suspected files found
0 Files cured
0 Files deleted

[病毒样本] [MD5: D41D8C 96BEA1 936590 F87569]

本帖子中包含更多资源

浏览过的版块