检查下~~

显示全部楼层 · 发表于 2007-12-23 16:52:38

[ 本帖最后由 tonger2003 于 2007-12-23 16:54 编辑 ]

显示全部楼层 · 发表于 2007-12-23 16:56:24

Start of the scan: 2007年12月23日  16:55

Starting the file scan:

Begin scan in 'K:\桌面.rar'
K:\桌面.rar
  [0] Archive type: RAR
--> CMDOW.rar
   [1] Archive type: RAR
   --> CMDOW.EXE
      [DETECTION] Contains detection pattern of the SPR/HideWindows.I program
--> userinit.rar
   [1] Archive type: RAR
   --> userinit.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
--> svchost.rar
   [1] Archive type: RAR
   --> svchost.exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
   [INFO]    A backup was created as '479cb9f6.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-12-23 16:57:36

已刪除: 病毒 Heur.Trojan.Generic (修改) 檔案: C:\Documents and Settings\kato9096\桌面\175820.rar/userinit.rar/userinit.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.lpg 檔案: C:\Documents and Settings\kato9096\桌面\175820.rar/svchost.rar/svchost.exe//PE_Patch.UPX//#

２个不报，１个变种，上报３个

[ 本帖最后由 kato9096 于 2007-12-23 17:00 编辑 ]

显示全部楼层 · 发表于 2007-12-23 17:10:03

R:\桌面.rar » RAR » CMDOW.rar » RAR » CMDOW.EXE - Win32/CMDOW.143 application
R:\桌面.rar » RAR » userinit.rar » RAR » userinit.exe - Win32/Mumawow.Gen virus
R:\桌面.rar » RAR » svchost.rar » RAR » svchost.exe - probably a variant of Win32/PSW.OnLineGames.NBR trojan

cmdow.exe不报也无所谓的说。。。。。。

[ 本帖最后由风野胤于 2007-12-23 17:11 编辑 ]

显示全部楼层 · 发表于 2007-12-23 17:10:52

Rising20.23.61未报一个！

显示全部楼层 · 发表于 2007-12-23 17:13:54

Riskware found
RiskTool.Win32.HideWindows (riskware)
C:\Documents and Settings\028222\×ÀÃæ\×ÀÃæ.rar\CMDOW.rar\CMDOW.EXE

显示全部楼层 · 发表于 2007-12-23 17:18:13

C:\��.rar\userinit.rar\userinit.exe - infected with Win32.Loader
C:\��.rar\svchost.rar\svchost.exe - infected with Trojan.PWS.Qqpass.origin

Archive contains 2 infected items

DRWEB 4.44 貌似是机器狗

显示全部楼层 · 发表于 2007-12-23 19:05:28

Hello,

CMDOW.exe_ - not-a-virus:RiskTool.Win32.HideWindows

This file is already detected by our extended bases as a potentially risk program.

debug.exe_

No malicious code was found in this file.

userinit.exe_ - Trojan-Downloader.Win32.Agent.ght

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

显示全部楼层 · 发表于 2007-12-23 19:54:37

显示全部楼层 · 发表于 2007-12-23 20:13:46

FSCS 一个未报

[病毒样本] 检查下~~

本帖子中包含更多资源

本帖子中包含更多资源