被arp欺骗中的

显示全部楼层 · 发表于 2007-11-13 20:32:00

Kaspersky Internet Security 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=152874 is infected with Virus.Win32.AutoRun.act virus

Kaspersky Internet Security 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=152875 is infected with Virus.Win32.AutoRun.act virus

显示全部楼层 · 发表于 2007-11-13 21:44:12

C:\Documents and Settings\Don johnson\桌面\sos.rar » RAR » sos.exe - a variant of Win32/AutoRun.K worm
C:\Documents and Settings\Don johnson\桌面\a.rar » RAR » a.exe - a variant of Win32/AutoRun.K worm

显示全部楼层 · 发表于 2007-11-13 22:41:51

在文件 C:\Documents and Settings\jljqq\Local Settings\Temporary Internet Files\Content.IE5\8NB1N82O\a[1].rar 中发现恶意代码。
感染: Virus.Win32.AutoRun.act
操作: 无.
在文件 C:\Documents and Settings\jljqq\Local Settings\Temporary Internet Files\Content.IE5\L0SRD941\sos[1].rar 中发现恶意代码。
感染: Virus.Win32.AutoRun.act
操作: 无.

显示全部楼层 · 发表于 2007-11-13 23:09:59

估计感染范围会不小……

显示全部楼层 · 发表于 2007-11-14 01:28:32

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 866
Paranoia Database - 48728
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\a.exe - Suspected WIN32.TROJAN-DOWNLOADER (HTTP://...)
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\sos.exe - Suspected WIN32.TROJAN-DOWNLOADER (HTTP://...)

2 Files scanned
0 Infected files found
2 Suspected files found
0 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-11-14 07:46:45

蜘蛛 2个

[病毒样本] 被arp欺骗中的

F-S7.1

浏览过的版块