赛门铁克用户中毒了

moonsilver

赛门铁克用户中毒了

Graybird

The file 'eyocckg.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.VB.boa. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

红心王子

1199853608,2008-1-9 12:40:08,Trojan.Undef.aos.gjnn,木马,Administrator,C:\Documents and Settings\Administrator\桌面\eyocckg.rar>>eyocckg.exe,Manual scan

The EQs

eyocckg.rar » RAR » eyocckg.exe - probably unknown NewHeur_PE virus

cy6266812

过红伞

卡吧报


Scan : completed
----------------
Scanned:        5
Detected:        1
Untreated:        0
Start time:        2008-1-9 13:04:36
Duration:        00:00:02
Finish time:        2008-1-9 13:04:38


Detected
--------
Status        Object
------        ------
deleted: Trojan program Trojan.Win32.VB.boa        File: F:\迅雷和浏览器下载\eyocckg.rar/eyocckg.exe//PE_Patch//MewBundle//MEW


Events
------
Time        Name        Status        Reason
----        ----        ------        ------


Statistics
----------
Object        Scanned        Detected        Untreated        Deleted        Moved to Quarantine        Archives        Packed files        Password protected        Corrupted
------        -------        --------        ---------        -------        -------------------        --------        ------------        ------------------        ---------


Settings
--------
Parameter        Value
---------        -----
Security Level        Custom
Action        Disinfect, delete if disinfection fails
Run mode        Manually
File types        Scan all files
Scan only new and changed files        No
Scan archives        all
Scan embedded OLE objects        all
Do not scan archives larger than        No
Skip if scan takes longer than        No
Parse email formats        No
Scan password-protected archives        Yes
Use iChecker technology        Yes
Use iSwift technology        Yes
Show detected threats on "Detected" tab        Yes
Rootkit scan        Yes
Extended rootkit scan        Yes
Use heuristic analyser        Yes
Heuristic analyser level        10

[ 本帖最后由 cy6266812 于 2008-1-9 13:05 编辑 ]

taiw_1144

发现木马
木马名称:Trojan.Win32.VB.cfg

程序:
C:\DOCUMENTS AND SETTINGS\TIAN\LOCAL SETTINGS\TEMP\RAR$EX00.218\EYOCCKG.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

这个木马比较新吧,微点要借助特征码识别杀!!

q315015405

C:\Documents and Settings\Administrator\桌面\eyocckg.rar>>eyocckg.exe        Trojan.Undef.aos.gjnn        木马        还未处理
费尔

mofunzone

v8居然干掉了
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\eyocckg.rar'
C:\Documents and Settings\Administrator\My Documents\
  eyocckg.rar
    [0] Archive type: RAR
      --> eyocckg.exe
        [1] Archive type: Runtime Packed
        --> Object
      [WARNING]   The file was ignored!


End of the scan: 2008年1月8日  21:17
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

solcroft

干掉了什么
怎么没病毒名的

觅寒枚

怎么费尔报的病毒名字和变种号跟rs如此相似？