我发一个毒

显示全部楼层 · 发表于 2007-10-18 06:24:43

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\桌面.rar'
C:\Users\morgan\Documents\
  桌面.rar
  桌面.rar:Zone.Identifier
[0] Archive type: RAR
--> gdiserver.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> gdisvc.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-18 07:37:50

显示全部楼层 · 发表于 2007-10-18 09:06:27

deleted: Trojan program Trojan-Clicker.Win32.VB.tw File: C:\Documents and Settings\Owner\×ÀÃæ\new.zip/new/gdiserver.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Clicker.Win32.VB.tw File: C:\Documents and Settings\Owner\×ÀÃæ\new.zip/new/gdisvc.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-10-18 10:13:52

实力悬殊差距好大

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GDI SERVER\ IMAGEPATH C:\PROGRAM FILES\COMMON FILES\SYSTEM\GDISERVER.EXE C:\WINDOWS\SYSTEM32\GDISVC.EXE

[ 本帖最后由 Nblock 于 2007-10-18 10:15 编辑 ]

显示全部楼层 · 发表于 2007-10-18 10:36:17

NOD32 MISS

显示全部楼层 · 发表于 2007-10-18 11:55:34

贴个中文版的.

[病毒样本] 我发一个毒

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块