午睡時間，盜號木馬一只

显示全部楼层 · 发表于 2008-1-30 13:27:42

費爾殺。。

显示全部楼层 · 发表于 2008-1-30 13:30:43

I:\virus\test\ay8p6v3.cmd - Suspect code-parts found (Level: 125)

1 File scanned
(0 Archives with 0 files)
0 Signatures found
1 Suspect code-part found
Used time: 0:00.110

显示全部楼层 · 发表于 2008-1-30 13:33:09

ESET 好久没见报gen的了
C:\Documents and Settings\GUNDAM\桌面\ay8p6v3.rar » RAR » ay8p6v3.cmd - Win32/Pacex.Gen virus

显示全部楼层 · 发表于 2008-1-30 13:37:37

The requested object is INFECTED. The following viruses Trojan-PSW.Win32.OnLineGames.pcm were found

Please contact your service provider if you feel this is incorrect.

显示全部楼层 · 发表于 2008-1-30 13:40:08

发现未知木马，是否删除？
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$DI00.922\AY8P6V3.CMD
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\EK5SGBW.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\USFMZ.SYS
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-1-30 13:50:03

Starting the file scan:

Begin scan in 'E:\ay8p6v3.rar'
E:\ay8p6v3.rar
  [0] Archive type: RAR
  --> ay8p6v3.cmd
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-30 13:50:41

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\ay8p6v3.rar'
C:\Documents and Settings\Administrator\桌面\ay8p6v3.rar
  [0] Archive type: RAR
  --> ay8p6v3.cmd
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-30 13:55:08

kv2008 杀

显示全部楼层 · 发表于 2008-1-30 14:02:20

无法在沙盘里执行...

显示全部楼层 · 发表于 2008-1-30 14:03:15

原帖由 gankeyu 于 2008-1-30 14:02 发表
无法在沙盘里执行...

當然了。。。

[病毒样本] 午睡時間，盜號木馬一只

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块