黑客防线上挂的木马

BING126

McAfee New Malware.aj

ballakay

Scanning Report
26 January 2008 21:15:05 - 21:15:05
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\baidu.rar


--------------------------------------------------------------------------------

Result: 1 malware found
Trojan-PSW.Win32.OnLineGames.ode (virus)
C:\Users\Administrator\Desktop\baidu.rar\baidu.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 2
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-26_02
Spyware: 2008-01-26_02
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-26
F-Secure Libra: 2.04.01, 2008-01-24
F-Secure Orion: 1.02.37, 2008-01-25
F-Secure Draco: 1.00.35, 2008-01-14
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

黄金马甲出租

机器狗阿，很好很强大

marksu2006

2008-1-27        21:55:01        已由访问保护规则禁止         PRC\Administrator        C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.969\baidu.exe        C:\WINDOWS\system32\IMM32.DLL        用户定义的规则:FD25——禁止新建DLL与未知程序调用DLL文件        已阻止的操作: 执行
2008-1-27        21:55:02        已由访问保护规则禁止         PRC\Administrator        C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.969\baidu.exe        C:\WINDOWS\system32\LPK.DLL        用户定义的规则:FD25——禁止新建DLL与未知程序调用DLL文件        已阻止的操作: 执行
2008-1-27        21:55:02        已由访问保护规则禁止         PRC\Administrator        C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.969\baidu.exe        C:\Documents and Settings\Administrator\Local Settings\Temp\tmp47.tmp        用户定义的规则:AD08-阻止未知程序私自执行        已阻止的操作: 写入
2008-1-27        21:55:02        已由访问保护规则禁止         PRC\Administrator        C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.969\baidu.exe        C:\Documents and Settings\Administrator\Local Settings\Temp\tmp49.tmp        用户定义的规则:AD08-阻止未知程序私自执行        已阻止的操作: 写入
2008-1-27        21:55:02        已由访问保护规则禁止         PRC\Administrator        C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.969\baidu.exe        C:\WINDOWS\system32\cmd.exe        用户定义的规则:AD04-禁止私自启用命令行运行工具        已阻止的操作: 读取