3个

显示全部楼层 · 发表于 2007-12-5 00:29:06

都跑到System Volume Informationf中去了

显示全部楼层 · 发表于 2007-12-5 00:36:26

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\3.rar'
C:\Documents and Settings\Administrator\桌面\3.rar
  [0] Archive type: RAR
  --> A0001061.exe
   [DETECTION] Is the Trojan horse TR/Agent.32776.1
  --> A0001155.exe
   [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
  --> A0001020.exe
   [DETECTION] Is the Trojan horse TR/Agent.32776.1
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-12-5 00:56:31

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 0:56:56 2007-12-5

+ Scan result:

C:\Documents and Settings\Administrator\桌面\3.rar/A0001020.exe -> Heuristic.Win32.AVKiller : Ignored.
C:\Documents and Settings\Administrator\桌面\3.rar/A0001061.exe -> Heuristic.Win32.AVKiller : Ignored.

::Report end

显示全部楼层 · 发表于 2007-12-5 02:37:55

The requested object is INFECTED. The following viruses Virus.Win32.AutoRun.aik were found

显示全部楼层 · 发表于 2007-12-5 10:09:00

D:\download\3.rar\A0001061.exe\[NsPack]\[Upack]\[ASPack] [L] Win32:AutoRun-FI (0)
D:\download\3.rar\A0001155.exe\[Upack] [L] Win32:Delf-GAM (0)
D:\download\3.rar\A0001020.exe\[NsPack]\[Upack]\[ASPack] [L] Win32:AutoRun-FI (0)
已感染文件: 3
总共文件: 12
总共文件夹: 1
总共大小: 1.1 MB

显示全部楼层 · 发表于 2007-12-5 10:40:36

kis7
已刪除: 病毒 Virus.Win32.AutoRun.ajg 檔案: C:\Documents and Settings\kato9096\桌面\166396\A0001020.exe//NSPack//UPack//ASPack//PE_Patch.MaskPE
已刪除: 病毒 Virus.Win32.AutoRun.ajg 檔案: C:\Documents and Settings\kato9096\桌面\166396\A0001061.exe//NSPack//UPack//ASPack//PE_Patch.MaskPE
已刪除: 病毒 Virus.Win32.AutoRun.aik 檔案: C:\Documents and Settings\kato9096\桌面\166396\A0001155.exe//UPack

显示全部楼层 · 发表于 2007-12-5 10:44:35

Virus.Win32.AutoRun.ajg
下载时kav7.0就报了

显示全部楼层 · 发表于 2007-12-5 10:49:33

Malware: Generic.Malware.SP!BdldPk!g.FDAEAB60
C:\Documents and Settings\028222\桌面\3.rar=>A0001155.exe

Malware: Generic.Malware.SP!Pk!g.F96AD391
C:\Documents and Settings\028222\桌面\3.rar=>A0001061.exe
C:\Documents and Settings\028222\桌面\3.rar=>A0001020.exe

显示全部楼层 · 发表于 2007-12-5 11:03:16

D:\病毒测试\未解压样本\3.rar » RAR » A0001061.exe - probably a variant of Win32/Delf.NDF worm
D:\病毒测试\未解压样本\3.rar » RAR » A0001155.exe - probably unknown NewHeur_PE virus
D:\病毒测试\未解压样本\3.rar » RAR » A0001020.exe - probably a variant of Win32/Delf.NDF worm

显示全部楼层 · 发表于 2007-12-5 11:07:18

G:\Users\Administrator\Desktop\3.rar » RAR » A0001061.exe - probably a variant of Win32/Delf.NDF worm - was a part of the deleted object
G:\Users\Administrator\Desktop\3.rar » RAR » A0001155.exe - probably unknown NewHeur_PE virus - was a part of the deleted object
G:\Users\Administrator\Desktop\3.rar » RAR » A0001020.exe - probably a variant of Win32/Delf.NDF worm - was a part of the deleted object
G:\Users\Administrator\Desktop\3.rar - multiple threats - deleted - quarantined

[病毒样本] 3个

本帖子中包含更多资源