被人挂马的网

显示全部楼层 · 发表于 2008-1-20 12:08:05

对象: MicroSofts.pif
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\SAMPLE.rar
Status: 已发现病毒
病毒: Worm.Win32.Downloader.dy (KAV 引擎), Trojan.Sorri.I (BD 引擎)

显示全部楼层 · 发表于 2008-1-20 12:08:38

3/1

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Mnless.zyt

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.27.60

显示全部楼层 · 发表于 2008-1-20 12:10:03

http://xxx.hao1680.com/xx.htm?id=017
http://demo.foosun.net/FS_Inc/Prototype.js
http://vccd.cn

显示全部楼层 · 发表于 2008-1-20 12:45:50

好像不是很厉害的！

显示全部楼层 · 发表于 2008-1-20 13:26:07

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\SAMPLE.rar'
C:\Documents and Settings\Administrator\My Documents\
  SAMPLE.rar
[0] Archive type: RAR
   --> MicroSofts.pif
      [1] Archive type: Runtime Packed
      --> Object
         [DETECTION] Is the Trojan horse TR/Dropper.Gen
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-20 13:30:43

ESET ESS 3.0 621没反应，用遨游上的

显示全部楼层 · 发表于 2008-1-20 15:04:34

Scanning Report
20 January 2008 15:04:15 - 15:04:15
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\SAMPLE.rar

--------------------------------------------------------------------------------

Result: 1 malware found
Worm.Win32.Downloader.dy (virus)
C:\Users\Administrator\Desktop\SAMPLE.rar\MicroSofts.pif

--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 2
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0

--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-19_02
Spyware: 2008-01-19_01
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-19
F-Secure Libra: 2.04.01, 2008-01-18
F-Secure Orion: 1.02.37, 2008-01-19
F-Secure Draco: 1.00.35, 2007-11-28
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

[已鉴定] 被人挂马的网

回复 2楼冷_冷的帖子

[已鉴定] 被人挂马的网

回复 2楼 冷_冷 的帖子

回复 2楼冷_冷的帖子