TRJ.BANBRA

显示全部楼层 · 发表于 2007-11-10 07:12:14

红伞

Starting the file scan:

Begin scan in 'C:\Documents and Settings\gwazy\桌面\imgir.rar'
C:\Documents and Settings\gwazy\桌面\imgir.rar
  [0] Archive type: RAR
  --> imgir.pps
   [DETECTION] Is the Trojan horse TR/Spy.Banbra.MR.6
   [INFO]    The file was moved to '479be980.qua'!

End of the scan: 2007年11月10日  07:11
Used time: 00:14 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-11-10 08:28:13

日期： 10.11.2007 时间：08:29:22
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\zh\桌面\imgir.pps
C:\Documents and Settings\zh\桌面\imgir.pps - 可能是 Win32/Spy.Banker 木马的一个变种
已扫描的文件数目：1
已发现的病毒数目：1
已清除病毒的文件数目：1
完成时间： 08:29:26 总扫描时间：4 秒 (00:00:04)

显示全部楼层 · 发表于 2007-11-10 08:30:39

MicroVita AntiSpyware 100 C
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\imgir\imgir.pps]
                  …………发现Spy！报告:[2] [1] Win32.NkHack.ADO
文件信息:  大小:1003008  MD5:5e54fe12ad4b7f2f632fffa1a16fe7a6

文件数:1 病毒数:1  比重:1
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎
[2] 文件特征码引擎
[1] 文件启发式引擎

显示全部楼层 · 发表于 2007-11-10 08:33:37

看来就只有江民一个过了``晕倒````

显示全部楼层 · 发表于 2007-11-11 02:23:55

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 814
Paranoia Database - 48608
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\imgir.pps

C:\Documents and Settings\Uhthn\Desktop\imgir.pps - Infected WIN32.GENERIC.MALWARE.D56.F4E00 - Deleted

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files disinfected
1 Files deleted

显示全部楼层 · 发表于 2007-11-12 17:10:54

这个pps也会带毒啊！

[病毒样本] TRJ.BANBRA