下午茶時間,木馬來了。。

wjw

已上报费尔

will

感谢你的辛勤上传！  

深红的雪

这个毒有点色...................

2008-01-26 23:44:58    创建文件      操作:允许
进程路径:D:\病毒样本\7.cmd
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.exe

2008-01-26 23:45:00    创建文件      操作:允许
进程路径:D:\病毒样本\7.cmd
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\6.exe

2008-01-26 23:45:05    运行应用程序      操作:允许
进程路径:D:\病毒样本\7.cmd
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.exe

2008-01-26 23:45:17    运行应用程序      操作:允许
进程路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.exe
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\6.exe

2008-01-26 23:45:21    创建文件      操作:允许
进程路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.exe
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.jpg

2008-01-26 23:45:24    运行应用程序      操作:允许
进程路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.exe
文件路径:C:\WINDOWS\System32\rundll32.exe
命令行:C:\WINDOWS\System32\shimgvw.dll,ImageView_Fullscreen C:\DOCUME~1\stream\LOCALS~1\Temp\RarSFX0\S夜店~1.JPG   (打开图片^_^)

2008-01-26 23:45:33    删除文件      操作:允许
进程路径:D:\病毒样本\7.cmd
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\6.exe

2008-01-26 23:45:36    删除文件      操作:允许
进程路径:D:\病毒样本\7.cmd
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.exe

2008-01-26 23:45:38    删除文件      操作:允许
进程路径:D:\病毒样本\7.cmd
文件路径:C:\Documents and Settings\stream\Local Settings\Temp\RarSFX0\S夜店美女S.jpg

gho

Result: 1 malware found
Trojan-PSW.Win32.Magania.dsg (virus)
H:\temp\RarSFX1\6.exe Action: deleted




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 1
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 1
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-26_03
Spyware: 2008-01-26_03
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-26
F-Secure Libra: 2.04.01, 2008-01-24
F-Secure Orion: 1.02.37, 2008-01-26
F-Secure Draco: 1.00.35, 2008-01-14

fengtao

卡巴报 nod bd 金山过