费尔杀杀杀!

显示全部楼层 · 发表于 2007-11-11 23:27:11

kis 7.0.0.125找不到，我已把這個文件傳到卡巴。

显示全部楼层 · 发表于 2007-11-11 23:32:15

AVAST报

显示全部楼层 · 发表于 2007-11-11 23:49:31

樓主：這是卡巴工程師給我的回覆

Hello.
No malicious software was found in the attached file.
-----------------
Regards, Vladimir Krylov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

意思是文件沒有病毒

[ 本帖最后由 kato9096 于 2007-11-12 00:25 编辑 ]

显示全部楼层 · 发表于 2007-11-12 00:23:36

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 850
Paranoia Database - 48663
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\pswmonitor.exe

C:\Documents and Settings\Uhthn\Desktop\pswmonitor.exe - Suspected MaliciousScope:GENERIC.MALWARE.8

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-11-12 17:40:01

是个监视密码的程序

显示全部楼层 · 发表于 2007-11-12 18:34:51

何以見得？

显示全部楼层 · 发表于 2007-11-12 20:13:46

Begin scan in 'C:\Documents and Settings\Administrator\桌面\pswmonitor.rar'
C:\Documents and Settings\Administrator\桌面\pswmonitor.rar
  [0] Archive type: RAR
  --> pswmonitor.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

KIS7飘……

显示全部楼层 · 发表于 2007-11-12 20:16:09

抱歉啊……
红伞的回复告诉我，发现了广告/间谍程序……

The file 'pswmonitor.exe' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/AdNow.A.2. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 6.35.01.87. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

[病毒样本] 费尔杀杀杀!

回复 15楼 googlehack 的帖子

回复 13楼 kato9096 的帖子