我女兒照片

显示全部楼层 · 发表于 2008-1-10 08:56:28

是一個盜號的

[ 本帖最后由冷_冷于 2008-1-10 08:57 编辑 ]

显示全部楼层 · 发表于 2008-1-10 08:57:55

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\ľ��.rar'
C:\Documents and Settings\Administrator\My Documents\
  ľ��.rar
[0] Archive type: RAR
   --> ﾧￚﾤkﾨ￠ﾬￛﾤ￹.com
      [1] Archive type: RAR SFX (self extracting)
      --> Setup.exe
         [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
         [WARNING] Infected files in archives cannot be repaired!
      --> inst.exe
      --> MyPic\Desktop.ini
      --> MyPic\2006924192650605.jpg
      --> MyPic\2006924192732323.jpg
      --> MyPic\2006924192810432.jpg
      --> MyPic\2006924192810821.jpg
      --> MyPic\2006924192810918.jpg
   [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\木马衍生物.rar'
C:\Documents and Settings\Administrator\My Documents\
  木马衍生物.rar
[0] Archive type: RAR
--> inst.exe
--> Setup.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 2.bat
--> F3C74E3FA248.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> F3C74E3FA248.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!

End of the scan: 2008年1月9日  16:57
Used time: 00:08 min

The scan has been done completely.

   0 Scanning directories
   16 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   12 Files not concerned
   3 Archives were scanned
   6 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-10 08:58:23

Starting the file scan:

Begin scan in 'E:\ľ��.rar'
E:\ľ��.rar
  [0] Archive type: RAR
--> §Ú¤k¨à¬Û¤ù.com
   [1] Archive type: RAR SFX (self extracting)
   --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!
Begin scan in 'E:\木马衍生物.rar'
E:\木马衍生物.rar
  [0] Archive type: RAR
  --> Setup.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> F3C74E3FA248.dll
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> F3C74E3FA248.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-1-10 09:58:37

C:\Documents and Settings\Don johnson\桌面\ľ��.rar » RAR » иㄠ.com » RAR » Setup.exe - a variant of Win32/PSW.OnLineGames.NFF trojan
C:\Documents and Settings\Don johnson\桌面\木马衍生物.rar » RAR » Setup.exe - a variant of Win32/PSW.OnLineGames.NFF trojan
C:\Documents and Settings\Don johnson\桌面\木马衍生物.rar » RAR » F3C74E3FA248.dll - a variant of Win32/PSW.OnLineGames.NHY trojan
C:\Documents and Settings\Don johnson\桌面\木马衍生物.rar » RAR » F3C74E3FA248.exe - a variant of Win32/PSW.OnLineGames.NFF trojan

显示全部楼层 · 发表于 2008-1-10 10:11:58

deleted: Trojan program Trojan-PSW.Win32.Magania.cuo File: C:\Documents and Settings\Owner\×ÀÃæ\Ä¾ÂíÑÜÉúÎï.rar/Setup.exe
deleted: Trojan program Trojan-PSW.Win32.Magania.cuo File: C:\Documents and Settings\Owner\×ÀÃæ\Ä¾ÂíÑÜÉúÎï.rar/F3C74E3FA248.dll
deleted: Trojan program Trojan-PSW.Win32.Magania.cuo File: C:\Documents and Settings\Owner\×ÀÃæ\Ä¾ÂíÑÜÉúÎï.rar/F3C74E3FA248.exe
deleted: Trojan program Trojan-PSW.Win32.Magania.cuo File: C:\Documents and Settings\Owner\×ÀÃæ\Ä¾Âí.rar/§Ú¤k¨à¬Û¤ù.com//data.rar/Setup.exe

显示全部楼层 · 发表于 2008-1-10 10:35:21

rs safe

显示全部楼层 · 发表于 2008-1-10 10:48:25

我女兒相片.COM 微点发现未知木马
1) C:\PROGRAM FILES\SETUP.EXE
2) C:\WINDOWS\HELP\F3C74E3FA248.DLL
3) C:\PROGRAM FILES\INST.EXE

显示全部楼层 · 发表于 2008-1-10 11:45:00

生成物江民认识，呵呵

显示全部楼层 · 发表于 2008-1-10 12:26:14

楼主用的什么软件？

显示全部楼层 · 发表于 2008-1-10 12:28:30

原帖由 mzn321103 于 2008-1-10 12:26 发表
楼主用的什么软件？

SSM

[病毒样本] 我女兒照片

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块