我终于接到msn病毒了

风野胤

nod殺掉
eset再次证明了其强悍的实力

2008-1-29 12:38:50        文件系统实时防护        文件        C:\Temp\Rar$DR00.000\photo_033.jpeg-morganyang@live.com        可能是 Win32/Nuwar 蠕虫 的变种        通过删除清除 - 已隔离        NT AUTHORITY\SYSTEM        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

不需要運行
解壓就報

只是壓縮包掃描的bug而已
掃描不報
解壓報
等下次壓縮文件支持模塊的升級了

[ 本帖最后由 风野胤 于 2008-1-29 12:57 编辑 ]

xxwpk007

微点轻松搞定


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\PHOTO_033.JPEG-MORGANYANG@LIVE.COM
蠕虫程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\WXZSZJM.EXE
是否删除蠕虫程序及其衍生物?

冷冷

先留个名
-------------------------------






[ 本帖最后由 冷_冷 于 2008-1-29 13:16 编辑 ]

爬墙找红杏

卡巴没报，我今天最新的病毒库

leonfg

原帖由 风野胤 于 2008-1-29 12:40 发表
nod殺掉
2008-1-29 12:38:50        文件系统实时防护        文件        C:\Temp\Rar$DR00.000\photo_033.jpeg-morganyang@live.com        可能是 Win32/Nuwar 蠕虫 的变种        通过删除清除 - 已隔离        ...

原来如此，期待下次更新解决bug。至少比crypt舒服多了呵呵
2008-1-29 12:55:36    Real-time file system protection    file    C:\Documents and Settings\GUNDAM\桌面\img531-jpg\photo_033.jpeg-morganyang@live.com    probably a variant of Win32/Nuwar worm    cleaned by deleting - quarantined    NT AUTHORITY\SYSTEM    Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

[ 本帖最后由 leonfg 于 2008-1-29 13:02 编辑 ]

woai_jolin

哎呀呀
2008-1-29 13:01:57        Real-time file system protection        file        G:\v\photo_033.jpeg-morganyang@live.com        probably a variant of Win32/Nuwar worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

lingbo110120

woai_jolin

2008-1-29 13:19:44        Real-time file system protection        file        G:\v\m.exe        probably a variant of Win32/Nuwar worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:19:39        Real-time file system protection        file        G:\v\ind.exe        probably a variant of Win32/Nuwar worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:19:34        Real-time file system protection        file        G:\v\ffohidfjlxss.exe        probably a variant of Win32/Nuwar worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:19:29        Real-time file system protection        file        G:\v\errqa.exe        probably a variant of Win32/Nuwar worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:19:24        Real-time file system protection        file        G:\v\abvgf.exe        probably a variant of Win32/Nuwar worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

leonfg

原帖由 lingbo110120 于 2008-1-29 13:13 发表
192502
192503

又是扫描不报解压报.....
解压了一个也没剩下  都是同一个文件
2008-1-29 13:20:30    Real-time file system protection    file    C:\Documents and Settings\GUNDAM\桌面\生成物\m.exe    probably a variant of Win32/Nuwar worm    cleaned by deleting - quarantined    NT AUTHORITY\SYSTEM    Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:20:21    Real-time file system protection    file    C:\Documents and Settings\GUNDAM\桌面\生成物\ind.exe    probably a variant of Win32/Nuwar worm    cleaned by deleting - quarantined    NT AUTHORITY\SYSTEM    Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:20:12    Real-time file system protection    file    C:\Documents and Settings\GUNDAM\桌面\生成物\ffohidfjlxss.exe    probably a variant of Win32/Nuwar worm    cleaned by deleting - quarantined    NT AUTHORITY\SYSTEM    Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:20:04    Real-time file system protection    file    C:\Documents and Settings\GUNDAM\桌面\生成物\errqa.exe    probably a variant of Win32/Nuwar worm    cleaned by deleting - quarantined    NT AUTHORITY\SYSTEM    Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-29 13:19:55    Real-time file system protection    file    C:\Documents and Settings\GUNDAM\桌面\生成物\abvgf.exe    probably a variant of Win32/Nuwar worm    cleaned by deleting - quarantined    NT AUTHORITY\SYSTEM    Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

[ 本帖最后由 leonfg 于 2008-1-29 13:23 编辑 ]

The EQs

这个问题我会反馈给Anton