U盘借同学后免费赠送的两个，均过卡巴7[MD5: CE535C 8E1527]

显示全部楼层 · 发表于 2007-11-12 18:36:16

显示全部楼层 · 发表于 2007-11-12 18:37:26

kis找不到，文件已傳給卡巴

显示全部楼层 · 发表于 2007-11-12 18:38:25

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\new.rar'
C:\Documents and Settings\Administrator\桌面\new.rar
  [0] Archive type: RAR
  --> msn.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Kenfa.FXD
  --> MicrSoft.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-12 18:38:45

Worm.Win32.Autorun.isk
Worm.Win32.AvKiller.ca

显示全部楼层 · 发表于 2007-11-12 19:00:04

ESS全灭..

显示全部楼层 · 发表于 2007-11-12 19:00:37

咖啡启发1个

显示全部楼层 · 发表于 2007-11-12 19:02:56

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.Autorun.isk
病毒： Worm.Win32.AvKiller.ca

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.18.01

显示全部楼层 · 发表于 2007-11-12 19:05:09

卡7确实

Begin scan in 'C:\Documents and Settings\Administrator\桌面\MicrSoft.exe'
C:\Documents and Settings\Administrator\桌面\MicrSoft.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\msn.exe'
C:\Documents and Settings\Administrator\桌面\msn.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Kenfa.FXD
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-11-12 19:29:35

AVAST1

显示全部楼层 · 发表于 2007-11-12 19:30:56

C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹\MICRSOFT.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\MICRSOFT.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹\MSN.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\DELL\「开始」菜单\程序\启动\MSN.EXE
2) C:\MSN.EXE
3) D:\MSN.EXE
是否删除木马程序及其衍生物?

[病毒样本] U盘借同学后免费赠送的两个，均过卡巴7[MD5: CE535C 8E1527]

本帖子中包含更多资源

4/2

本帖子中包含更多资源

浏览过的版块