垃圾邮件..

BING126

McAfee         Spy-Agent.bv.dldr

qianwenxiang

还是上次那个发件人发的 几个星期没查垃圾邮件箱 今天查了下 拖出来三个

残缺的唯美

扫描统计:
扫描时间: 1秒
扫描选项:
扫描目标: G:\Users\Administrator\Desktop\video.zip
  计数:
扫描的项目总数: 2
- 文件和目录: 2
- 注册表项: 0
- 进程和启动项: 0
- 网络和浏览器项目: 0
- 其他: 0

检测到的安全风险总数: 1
已解决的项目总数: 1
需要注意的项目总数: 0

已解决的风险:
Trojan.Pandex
病毒 ID: 11511
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 文件
[video.scr] 位于[g:\users\administrator\desktop\video.zip] - 已删除




未解决的风险:

冷冷

-------------------------------------------------------------------------------
I:\virus\test/video.scr: Trojan.Dropper-4030 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 197940
Engine version: 0.92
Scanned directories: 1
Scanned files: 1
Infected files: 1
Data scanned: 0.03 MB
Time: 5.906 sec (0 m 5 s)

I:\virus\test\video.scr - Signature 'Win32.Outbreak' found
1 File scanned
   (0 Archives with 0 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.015

mofunzone

我要换v7了。。。
A listing of files alongside their results can be found below:

File ID  Filename  Size (Byte) Result
3653904  video.src  28.5 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
video.src  MALWARE

The file 'video.src' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dropper.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.

woai_jolin

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\video.zip'
C:\Documents and Settings\Administrator\桌面\video.zip
  [0] Archive type: ZIP
  --> video.scr
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!

zwl2828

C:\Users\Wesley\Downloads\video.zip
  [0] Archive type: ZIP
  --> video.scr
      [DETECTION] Is the Trojan horse TR/Dropper.Gen

Nblock

原帖由 qianwenxiang 于 2008-1-26 20:54 发表
还是上次那个发件人发的 几个星期没查垃圾邮件箱 今天查了下 拖出来三个

网址请贴上来

木马名称:Rootkit.Win32.Runtime.e
程序:
C:\WINDOWS\SYSTEM32\DRIVERS\RUNTIME.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

qianwenxiang

是邮件的附件 木有网址