3个

显示全部楼层 · 发表于 2007-12-5 11:14:13

大蜘蛛3个都发现了

3.rar\A0001061.exe;C:\Documents and Settings\77\My Documents\3.rar;可能 DLOADER.Trojan;;
3.rar\A0001155.exe;C:\Documents and Settings\77\My Documents\3.rar;Win32.HLLW.Autoruner.952;;
3.rar\A0001020.exe;C:\Documents and Settings\77\My Documents\3.rar;可能 DLOADER.Trojan;;
3.rar;C:\Documents and Settings\77\My Documents;发现档案文件中有受感染的对象;;

显示全部楼层 · 发表于 2007-12-5 11:18:47

显示全部楼层 · 发表于 2007-12-5 11:40:07

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\A0001020.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\KOCLJBB.EXE
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\YMEMAHV.EXE
3) C:\PROGRAM FILES\MEEX.EXE
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\A0001061.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\A0001155.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM\C0NIME.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-12-5 14:11:14

FS只查出一个上报

显示全部楼层 · 发表于 2007-12-5 21:36:20

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1022
Paranoia Database - 49642
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\3

C:\Documents and Settings\Uhthn\Desktop\3\A0001061.exe - Suspected MaliciousScope:TROJAN-DOWNLOADER.DELF.1
C:\Documents and Settings\Uhthn\Desktop\3\A0001155.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\3\A0001020.exe - Suspected MaliciousScope:TROJAN-DOWNLOADER.DELF.1

3 Files scanned
0 Infected files found
3 Suspected files found
0 Files disinfected
0 Files deleted

[病毒样本] 3个

本帖子中包含更多资源