30日磁碟机最新变种衍生物~ 看看你的杀软杀几个！

gho

呵呵FS4个都报了，不过是自动改名

Graybird

Starting the file scan:

Begin scan in 'E:\sample.zip'
E:\sample.zip
  [0] Archive type: ZIP
  --> netcfg.dll
      [DETECTION] Is the Trojan horse TR/BHO.adz
  --> SMSS.EXE
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
  --> dnsq.dll
      [DETECTION] Is the Trojan horse TR/Xorer.DD.1
  --> LSASS.EXE
      [DETECTION] Is the Trojan horse TR/Xorer.DD.2
      [INFO]      The file was deleted!

SMSS.EXE报壳~

SONGBOWEN

呃。。。。。

MS冰刃被他K掉了。。。。

冰刃被他搞崩溃了。。。。。。

yyko10086

红伞又杀了，，哎。

89767

C:\Documents and Settings\chan\Local Settings\Temporary Internet Files\Content.IE5\CN2VI97J\sample[1].zip\netcfg.dll - infected with Trojan.Rox
C:\Documents and Settings\chan\Local Settings\Temporary Internet Files\Content.IE5\CN2VI97J\sample[1].zip\SMSS.EXE - infected with Trojan.Rox
C:\Documents and Settings\chan\Local Settings\Temporary Internet Files\Content.IE5\CN2VI97J\sample[1].zip\LSASS.EXE\data001 - infected with Trojan.Rox
C:\Documents and Settings\chan\Local Settings\Temporary Internet Files\Content.IE5\CN2VI97J\sample[1].zip\LSASS.EXE\data002 - infected with Trojan.Rox

yuyando

Begin scan in 'F:\Documents and Settings\Administrator\桌面\sample.zip'
F:\Documents and Settings\Administrator\桌面\sample.zip
  [0] Archive type: ZIP
  --> netcfg.dll
      [DETECTION] Is the Trojan horse TR/BHO.adz
  --> dnsq.dll
      [DETECTION] Is the Trojan horse TR/Xorer.DD.1
  --> LSASS.EXE
      [DETECTION] Is the Trojan horse TR/Xorer.DD.2


偶要怎么设置？才报这个的
SMSS.EXE
      [DETECTION] File has been compressed with an unusual runtimecompression tool (PCK/FSG). Please verify the origin of the file

[ 本帖最后由 yuyando 于 2008-1-4 13:24 编辑 ]

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Win32.Dubai.a            

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.25.42