群里养的鸽子

显示全部楼层 · 发表于 2008-2-6 19:32:00

江民，瑞星，AVG没反应

显示全部楼层 · 发表于 2008-2-6 19:47:30

avast 飘

显示全部楼层 · 发表于 2008-2-6 19:54:34

avast被pass了

显示全部楼层 · 发表于 2008-2-6 20:04:58

2008-02-06 20:03:52 创建文件操作:阻止
进程路径:C:\Program Files\WinRAR\WinRAR.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.141\3.exe
触发规则:黑名单->黑名单1->*\3.exe

显示全部楼层 · 发表于 2008-2-6 20:05:23

金山过年去啦

显示全部楼层 · 发表于 2008-2-6 21:04:50

程序:
C:\DOCUMENTS AND SETTINGS\小尚\LOCAL SETTINGS\TEMP\RAR$EX01.797\3.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\R_SERVER.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-2-6 21:26:34

诺顿2006没报啊,看的我有点恢心啊.郁闷中啊.

显示全部楼层 · 发表于 2008-2-6 21:27:28

Scan Log
Version of virus signature database: 2852 (20080206)
Date: 2008-2-6 Time: 21:27:21
Scanned disks, folders and files: G:\v\3.rar
G:\v\3.rar » RAR » 3.exe - probably a variant of Win32/GreyBird trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 21:27:21 Total scanning time: 0 sec (00:00:00)

[病毒样本] 群里养的鸽子