红伞报的三个

显示全部楼层 · 发表于 2007-11-7 17:20:50

红伞报的三个

显示全部楼层 · 发表于 2007-11-7 17:34:51

C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar
Win32/PSWTool.RAS.A application deleted - quarantined Event occurred on a file modified by the application: C:\Program Files\Mozilla Firefox\firefox.exe.
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE
Win32/PSWTool.RAS.A application was a part of the deleted object
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE » UPX v12_m2
Win32/PSWTool.RAS.A application was a part of the deleted object
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE » UPX v12_m2 » RAR » xpkey.exe
Win32/PSWTool.RAS.A application was a part of the deleted object
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE » UPX v12_m2 » RAR » RAS.exe » UPX v12_m2 is OK
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE » UPX v12_m2 » RAR » RockXp_.exe » UPX v12_m5~_ext is OK
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE » RAR » xpkey.exe
Win32/PSWTool.RAS.A application was a part of the deleted object
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE » RAR » RAS.exe » UPX v12_m2 is OK
C:\DOCUME~1\Martin\LOCALS~1\Temp\oven9uny.rar » RAR » ROCKXP.EXE » RAR » RockXp_.exe » UPX v12_m5~_ext is OK

显示全部楼层 · 发表于 2007-11-7 18:04:56

KIS7只报第三个
已删除：风险软件 not-a-virus:PSWTool.Win32.RAS.a 文件: D:\Downloads\ROCKXP.rar/ROCKXP.EXE/xpkey.exe//UPX
已删除：风险软件 not-a-virus:PSWTool.Win32.RAS.a 文件: D:\Downloads\ROCKXP.rar/ROCKXP.EXE/RAS.exe//UPX
已删除：风险软件 not-a-virus:PSWTool.Win32.RAS.a 文件: D:\Downloads\ROCKXP.rar/ROCKXP.EXE/RockXp_.exe//UPX

显示全部楼层 · 发表于 2007-11-7 18:16:05

----[ Infected Files ]------------

Malware: Backdoor.Pcclient.GV
C:\Documents and Settings\028222\桌面\COMMON.rar=>COMMON.DLL

----[ Infected Spyware Files ]------------

Malware: Spyware.Pws.A
C:\Documents and Settings\028222\桌面\ROCKXP.rar=>ROCKXP.EXE=>(RAR Sfx o)=>RAS.exe
C:\Documents and Settings\028222\桌面\ROCKXP.rar=>ROCKXP.EXE=>(RAR Sfx o)=>RockXp_.exe

显示全部楼层 · 发表于 2007-11-7 18:27:10

好像是正常软件

显示全部楼层 · 发表于 2007-11-7 18:28:44

查看密码的啊

[病毒样本] 红伞报的三个

本帖子中包含更多资源

EAV前两个PASS