50%查出率,过卡巴,江民,金山,熊猫,趋势,瑞星 ,赛门铁克,过不了小红伞.

v4023

楼主太长了，看不懂是什么。

我是小白

EAV3.0
I:\Downloads\test.rar ?RAR ?test.exe - 可能是 Win32/Genetik 特洛伊木马 的变种

？？？这算是查出来了吗？

soprano

Start of the scan: 2008年1月3日  21:16

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\test.rar'
C:\Documents and Settings\Administrator\桌面\test.rar
  [0] Archive type: RAR
  --> test.exe
      [DETECTION] Is the Trojan horse TR/Agent.20585
      [INFO]      The file was deleted!


End of the scan: 2008年1月3日  21:16
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

葬禮

这么敏感

1688388728

2008-01-04 00:35:01    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:C:\WINDOWS\system32\Flower.dll
触发规则:所有程序规则->文件规则->%systemdrive%\*.dll

2008-01-04 00:35:25    修改其它进程内存      操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
目标进程:C:\WINDOWS\system32\spoolsv.exe
触发规则:所有程序规则->*

2008-01-04 00:35:01    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:C:\WINDOWS\system32\config\systemprofile\vista.exe
触发规则:黑名单->文件保护->?:\*.exe

2008-01-04 00:35:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:C:\test.exe
触发规则:黑名单->文件保护->C:\*

2008-01-04 00:35:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:C:\autorun.inf
触发规则:黑名单->文件保护->C:\*

2008-01-04 00:35:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:D:\test.exe
触发规则:黑名单->文件保护->D:\*


2008-01-04 00:35:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:D:\autorun.inf
触发规则:黑名单->文件保护->D:\*

2008-01-04 00:35:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:E:\test.exe
触发规则:黑名单->文件保护->E:\*


2008-01-04 00:35:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:E:\autorun.inf
触发规则:黑名单->文件保护->E:\*

2008-01-04 00:35:31    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:F:\test.exe
触发规则:黑名单->文件保护->F:\*


2008-01-04 00:35:31    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\test\test.exe
文件路径:F:\autorun.inf
触发规则:黑名单->文件保护->F:\*

aidewa

symantec  杀

小白鼠

我早就发过了这个病毒样本。是AV

29159011

木马名称:Trojan.Win32.Genetik.exx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\TEST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

clooke

灰鸽子啊

leezf

过AVG,过不了NOD32!!!!!!!!!!!!!!!!!