5个盗号

显示全部楼层 · 发表于 2007-12-2 21:21:33

瑞星到现在还只是4个.....卡巴 avast 都报了5个..

显示全部楼层 · 发表于 2007-12-3 00:43:42

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1009
Paranoia Database - 49435
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\wincab.sys - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\ACE.dll - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\SERVICES.EXE - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\winn0.exe - Infected WIN32.TROJAN-PSW.ONLINEGAMES.28 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\winpe0.dll - Infected WIN32.TROJAN-PSW.ONLINEGAMES.28 - Deleted

5 Files scanned
2 Infected files found
0 Suspected files found
0 Files disinfected
2 Files deleted

显示全部楼层 · 发表于 2007-12-3 00:49:42

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\SERVICES.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\V.DLL
2) C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\YYG23QUI.SYS
是否删除木马程序及其衍生物?

[病毒样本] 5个盗号