大家看看是什么

显示全部楼层 · 发表于 2007-12-31 15:24:41

卡巴。nod32都报毒

显示全部楼层 · 发表于 2007-12-31 15:40:28

FP挂
-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2007-12-31, 5:54

Scan name: 12.31
Path to scan: C:\样本 yangpizhi\12.31\|

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-12-31, 15:40:26
---------------------------------------------------------------------

[Clean] Boot sector on drive F:
[Clean] Boot sector on drive E:
[Clean] Boot sector on drive D:
[Clean] Boot sector on drive C:
[Clean] Master Boot Record on disk 0
[Clean] C:\样本 yangpizhi\12.31\set_up.rar->set_up.exe
[Clean] C:\样本 yangpizhi\12.31\set_up.rar

---------------------------------------------------------------------
Scan ended: 2007-12-31, 15:40:28
Duration: 0:00:01

Scan result:

Scanned files:    6
Infected objects:    0
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-12-31 16:22:28

金山报代理木马12071
avast pass
费尔报壳
clamwin pass

显示全部楼层 · 发表于 2007-12-31 16:25:04

执行后复制自身到C:\windows\system32\drivers\svchost.exe
生成c:\windows\system32\update.bak等

显示全部楼层 · 发表于 2007-12-31 16:41:21

盗号贝~~~- -

[病毒样本] 大家看看是什么