毒网上拔下来的两个

显示全部楼层 · 发表于 2007-10-27 13:24:42

小a报1个
top.exe : Win32:Onlinegames-BCW [Trj]

显示全部楼层 · 发表于 2007-10-27 13:25:34

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\ALL.EXE
木马程序生成以下文件:
1) C:\WINDOWS\9129837.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\TOP.EXE
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\TOP.EXE
是否删除病毒程序及其衍生物?

显示全部楼层 · 发表于 2007-10-27 13:29:12

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\1027.rar'
C:\Documents and Settings\Administrator\桌面\1027.rar
  [0] Archive type: RAR
  --> all.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> top.exe
   [DETECTION] Is the Trojan horse TR/Agent.20486
   [INFO]    The file was moved to '4754ccda.qua'!

End of the scan: 2007年10月27日  13:29
Used time: 00:02 min

显示全部楼层 · 发表于 2007-10-27 15:16:41

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\1027.rar/all.exe

显示全部楼层 · 发表于 2007-10-27 15:29:44

咖啡报了：1027.rar\all.exe New Poly Win32 (病毒)

显示全部楼层 · 发表于 2007-10-27 19:48:00

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Spy.Win32.Agent.dfs
病毒： Trojan.DL.Win32.Agent.ztz

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.15.52

显示全部楼层 · 发表于 2007-10-27 20:16:17

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 708
Paranoia Database - 48220
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\all.exe - Suspected MaliciousScope:MALWARE.PSW.16
C:\Documents and Settings\Uhthn\Desktop\New Folder\top.exe - Suspected MaliciousScope:MALWARE.PSW.1

2 Files scanned
0 Infected files found
2 Suspected files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-28 10:27:29

毒霸又挂了.

[病毒样本] 毒网上拔下来的两个

本帖子中包含更多资源

4/2

浏览过的版块