1个

显示全部楼层 · 发表于 2007-12-12 19:55:25

原帖由 <i>dericyeoh</i> 于 2007-12-12 17:30 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=2261624&ptid=170091" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0" alt="" /></a><br />
KIS7.扫描.主防毫无作用.....<br />
主防只是发现访问注册表.但文件仍生成...并感染autorun.........汗个

你直接点了吗。。。没在虚拟机还是沙盘。。高人

显示全部楼层 · 发表于 2007-12-12 20:11:59

原帖由 y37007 于 2007-12-12 19:55 发表

你直接点了吗。。。没在虚拟机还是沙盘。。高人

嗯.懒得重启.
反正没有见连接网络的动作.

显示全部楼层 · 发表于 2007-12-12 20:53:18

kis7不报，已上报

显示全部楼层 · 发表于 2007-12-12 22:47:08

Hello,

new.exe_ - Trojan-PSW.Win32.OnLineGames.koq

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-12-13 00:05:24

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\new.rar'
C:\Users\morgan\Documents\
  new.rar
[0] Archive type: RAR
   --> new.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
            [WARNING] Infected files in archives cannot be repaired!
      --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
            [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

End of the scan: 2007年12月12日  08:04
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   2 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   2 Archives were scanned
   2 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-13 00:10:59

f-s报

[ 本帖最后由郝好赢于 2007-12-13 00:13 编辑 ]

显示全部楼层 · 发表于 2007-12-13 00:15:32

结果: 发现1个恶意软件
Trojan-PSW.Win32.OnLineGames.koq (病毒)
C:\Documents and Settings\hyl\桌面\new.rar\new.exe

[病毒样本] 1个

回复 13楼 kato9096 的帖子

浏览过的版块