[病毒样本] 1

显示全部楼层 · 发表于 2008-1-5 21:57:45

...........

显示全部楼层 · 发表于 2008-1-5 22:01:00

C:\Documents and Settings\Administrator\桌面\1.rar>>1\ridiap080104.exe Heuri.Suspicious.ERNM 启发式扫描还未处理

显示全部楼层 · 发表于 2008-1-5 22:01:10

Virus or unwanted program 'TR/Dropper.Gen [TR/Dropper.Gen]'
detected in file 'C:\Sandbox\Administrator\123\user\current\Local Settings\Temporary Internet Files\Content.IE5\I1KLM56P\1[1].rar.
Action performed: Deny access

显示全部楼层 · 发表于 2008-1-5 22:01:21

Scan Log
Version of virus signature database: 2766 (20080104)
Date: 2008-1-5 Time: 22:01:07
Scanned disks, folders and files: D:\firefox download\1.rar
D:\firefox download\1.rar » RAR » 1\ridiap080104.exe - probably a variant of Win32/Genetik trojan
Number of scanned objects: 1
Number of threats found: 1
Time of completion: 22:01:17 Total scanning time: 10 sec (00:00:10)

显示全部楼层 · 发表于 2008-1-5 22:13:31

1个

C:\Users\Wesley\Downloads\1.rar » RAR » 1\ridiap080104.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-1-5 22:19:33

显示全部楼层 · 发表于 2008-1-5 22:27:50

卡巴miss，上报！

显示全部楼层 · 发表于 2008-1-5 22:52:05

ridiap080104.exe_ - Trojan-Spy.Win32.Agent.axp

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2008-1-5 23:08:48

windows清理助手查到一个特洛伊木马
不过本人比较极端，运行木马再扫

显示全部楼层 · 发表于 2008-1-6 01:46:17

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\1.rar'
C:\Documents and Settings\Administrator\My Documents\
  1.rar
[0] Archive type: RAR
   --> 1\ridiap080104.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
            [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

[病毒样本] 1

本帖子中包含更多资源

ESET Smart Security

本帖子中包含更多资源