[病毒样本] 1

显示全部楼层 · 发表于 2008-2-6 17:17:14

F:\virus\0.rar » RAR » 0.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-2-6 17:17:46

Starting the file scan:

Begin scan in 'E:\0.rar'
E:\0.rar
  [0] Archive type: RAR
  --> 0.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-6 17:21:01

IK
I:\virus\0.rar:\0.exe - Signature 'Worm.Win32.AutoRun.cfe' found
I:\virus\0.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.015

显示全部楼层 · 发表于 2008-2-6 18:04:57

2008-2-6 18:10:16 Kernel File '0.exe' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-6 18:29:33

rising20.30.20未认得！！

显示全部楼层 · 发表于 2008-2-6 19:56:59

C:\Documents and Settings\77\My Documents\0(1).rar>>0.exe Worm.AutoRun.cka.dofb 病毒还未处理

显示全部楼层 · 发表于 2008-2-6 20:00:17

2008-02-06 19:59:45 创建文件操作:阻止
进程路径:C:\Program Files\WinRAR\WinRAR.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX01.422\0.exe
触发规则:黑名单->黑名单1->*\0.exe

[ 本帖最后由 marksu2006 于 2008-2-6 20:03 编辑 ]

显示全部楼层 · 发表于 2008-2-6 20:01:57

0.rar\0.exe;C:\Documents and Settings\Administrator\桌面\0.rar;可能 DLOADER.Trojan;;
0.rar;C:\Documents and Settings\Administrator\桌面;发现档案文件中有受感染的对象;;

显示全部楼层 · 发表于 2008-2-6 20:03:05

金山过年去啦

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源