4个~

显示全部楼层 · 发表于 2008-1-20 22:10:14

原帖由 <i>garyyan456</i> 于 2008-1-20 21:30 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=2583075&ptid=191259" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0" onclick="zoom(this)" onload="op_stop();attachimg(this, 'load');op_start();" alt="" /></a><br />
nod kill2 13.exe not retn 11.exe not retn

<br />
Scan Log
Version of virus signature database: 2807 (20080119)
Date: 2008-1-20 Time: 22:05:12
Scanned disks, folders and files: C:\Documents and Settings\GUNDAM\桌面\新建文件夹.rar
C:\Documents and Settings\GUNDAM\桌面\新建文件夹.rar » RAR » 新建文件夹\11.exe » FSG v2.0 - unpack error
C:\Documents and Settings\GUNDAM\桌面\新建文件夹.rar » RAR » 新建文件夹\14.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\GUNDAM\桌面\新建文件夹.rar » RAR » 新建文件夹\21.exe - probably a variant of Win32/AutoRun.Q worm
Number of scanned objects: 4
Number of threats found: 2
Time of completion: 22:05:13 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2008-1-20 22:33:08

I:\virus\新建文件夹.rar:\新建文件夹\11.exe - Signature 'Trojan-PWS.Win32.Delf.ix' found
I:\virus\新建文件夹.rar:\新建文件夹\13.exe - File is maybe corrupt
I:\virus\新建文件夹.rar:\新建文件夹\14.exe - Signature 'Trojan-Spy.Win32.Goldun.HT' found
I:\virus\新建文件夹.rar:\新建文件夹\21.exe - Signature 'Trojan-Proxy.Win32.Delf.AN' found
I:\virus\新建文件夹.rar

5 Files scanned
(1 Archiv with 4 files)
3 Signatures found
0 Suspect code-parts found
Used time: 0:00.203

显示全部楼层 · 发表于 2008-1-20 23:57:25

已删除：木马程序 Trojan.Win32.Pakes.bzp 文件　: G:\Temp\新建文件夹.rar/新建文件夹\11.exe
已删除：木马程序 Trojan.Win32.Pakes.bzp 文件　: G:\Temp\新建文件夹.rar/新建文件夹\14.exe
已删除：木马程序 Trojan-PSW.Win32.QQPass.ary 文件　: G:\Temp\新建文件夹.rar/新建文件夹\21.exe//UPX

显示全部楼层 · 发表于 2008-1-21 01:20:57

没下来就被杀了~

显示全部楼层 · 发表于 2008-1-21 07:37:57

11 13又是尸体
红伞又尸启了

显示全部楼层 · 发表于 2008-1-21 11:51:25

Scanning Report
21 January 2008 11:50:32 - 11:50:35
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\ÐÂ½¨ÎÄ¼þ¼Ð.rar

--------------------------------------------------------------------------------

Result: 3 malware found
Trojan.Win32.Pakes.bzp (virus)
C:\Users\Administrator\Desktop\ÐÂ½¨ÎÄ¼þ¼Ð.rar\ÐÂ½¨ÎÄ¼þ¼Ð\11.exe
C:\Users\Administrator\Desktop\ÐÂ½¨ÎÄ¼þ¼Ð.rar\ÐÂ½¨ÎÄ¼þ¼Ð\14.exe
Trojan-PSW.Win32.QQPass.ary (virus)
C:\Users\Administrator\Desktop\ÐÂ½¨ÎÄ¼þ¼Ð.rar\ÐÂ½¨ÎÄ¼þ¼Ð\21.exe

--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 5
Not scanned: 0
Result:
Viruses: 3
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0

--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-20_03
Spyware: 2008-01-20_03
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-20
F-Secure Libra: 2.04.01, 2008-01-18
F-Secure Orion: 1.02.37, 2008-01-20
F-Secure Draco: 1.00.35, 2007-11-28
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

显示全部楼层 · 发表于 2008-1-21 11:54:54

原帖由 风野胤 于 2008-1-21 07:37 发表
11 13又是尸体
红伞又尸启了

红伞又不是行为模拟

显示全部楼层 · 发表于 2008-1-21 12:20:47

微点砍掉

其他两个提示不是有效的32位文件

[病毒样本] 4个~

本帖子中包含更多资源