伪explorer.exe下载者，非常可恶的病毒！

显示全部楼层 · 发表于 2008-2-11 15:54:01

C:\Documents and Settings\Nerazzurri\桌面\伪explorer[1].exe下载者.rar >>RAR >>EXPLORER.EXE - Win32/Bacalid 病毒
C:\Documents and Settings\Nerazzurri\桌面\伪explorer[1].exe下载者.rar >>RAR >>RavMon.exe - Win32/Agent.NAV 蠕虫

显示全部楼层 · 发表于 2008-2-11 15:55:02

Starting the file scan:

Begin scan in 'E:\virus\αexplorer.exe��.rar'
E:\virus\αexplorer.exe��.rar
  [0] Archive type: RAR
  --> EXPLORER.EXE
   [DETECTION] Contains detection pattern of the worm WORM/Detnat.E.121
  --> RavMon.exe
   [DETECTION] Is the Trojan horse TR/Agent.Abt.3
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-11 16:03:44

kv2007:

显示全部楼层 · 发表于 2008-2-11 16:19:50

IK
I:\virus\伪explorer[1].exe下载者.rar:\AutoRun.inf
I:\virus\伪explorer[1].exe下载者.rar:\EXPLORER.EXE - Signature 'Virus.Win32.VB.bu' found
I:\virus\伪explorer[1].exe下载者.rar:\RavMon.exe - Signature 'Trojan.Win32.Agent.abt' found
I:\virus\伪explorer[1].exe下载者.rar

4 Files scanned
(1 Archiv with 3 files)
2 Signatures found
0 Suspect code-parts found
Used time: 0:00.046

显示全部楼层 · 发表于 2008-2-11 16:23:43

2008-2-11 16:23:39 Real-time file system protection file G:\v\RavMon.exe Win32/Agent.NAV worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-2-11 16:23:37 Real-time file system protection file G:\v\EXPLORER.EXE Win32/Bacalid virus deleted - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-2-11 16:28:44

病毒: Virus.Win32.VB.bu, Trojan.Win32.Agent.abt
文件: 伪explorer[1].exe下载者.rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q
进程: Maxthon.exe

显示全部楼层 · 发表于 2008-2-11 16:32:58

蠕虫名称:Worm.Win32.Detnat.az

程序:
F:\EXPLORER.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Agent.cfs

程序:
F:\RAVMON.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-2-11 16:43:17

C:\Documents and Settings\hp\桌面\伪explorer[1].exe下载者.rar>RAR>EXPLORER.EXE - Win32/Bacalid 病毒
C:\Documents and Settings\hp\桌面\伪explorer[1].exe下载者.rar>RAR>RavMon.exe - Win32/Agent.NAV 蠕虫

显示全部楼层 · 发表于 2008-2-11 16:44:04

已刪除: 病毒 Virus.Win32.VB.bu 檔案: C:\Documents and Settings\kato9096\獢\隡河xplorer.exe銝贝蝸??rar/EXPLORER.EXE
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.abt 檔案: C:\Documents and Settings\kato9096\獢\隡河xplorer.exe銝贝蝸??rar/RavMon.exe//NPack

[病毒样本] 伪explorer.exe下载者，非常可恶的病毒！

本帖子中包含更多资源

本帖子中包含更多资源

ESET Smart Security