3[MD5: 2B692E 348DFD D7E0DE]

显示全部楼层 · 发表于 2007-12-9 09:29:10

Starting the file scan:

Begin scan in 'E:\��.rar'
E:\��.rar
  [0] Archive type: RAR
  --> S0UNDMAN.EXE
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 1sasrv.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

已上报~

显示全部楼层 · 发表于 2007-12-9 09:31:50

detected: virus File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/twain.dll//
detected: virus stGt File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/S0UNDMAN.EXE//
detected: virus File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/1sasrv.dll//"?

显示全部楼层 · 发表于 2007-12-9 10:09:38

FS飘过
虚拟机正在装，不行了，得好好体会体会它的deepguard

显示全部楼层 · 发表于 2007-12-9 10:11:41

mcafee启发了一个

显示全部楼层 · 发表于 2007-12-9 10:12:33

deleted: virus Virus.Win32.AutoRun.akn File: C:\Documents and Settings\gho\×ÀÃæ\1sasrv.dll//ASPack
deleted: virus Virus.Win32.AutoRun.akn File: C:\Documents and Settings\gho\×ÀÃæ\twain.dll//ASPack
deleted: virus Virus.Win32.AutoRun.yl File: C:\Documents and Settings\gho\×ÀÃæ\1sasrv.dll//NSPack

显示全部楼层 · 发表于 2007-12-9 10:13:49

G:\Users\Administrator\Desktop\样本.rar » RAR » twain.dll - Win32/Spy.Delf.NEH trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 1sasrv.dll - Win32/AutoRun.DY worm

显示全部楼层 · 发表于 2007-12-9 10:38:54

费尔报了3个

显示全部楼层 · 发表于 2007-12-9 14:30:47

avast 报

显示全部楼层 · 发表于 2007-12-9 14:46:56

AVAST下载时直接拦截··

[病毒样本] 3[MD5: 2B692E 348DFD D7E0DE]

本帖子中包含更多资源

浏览过的版块