覆盖SYS..

显示全部楼层 · 发表于 2008-2-17 16:37:05

Start of the scan: 2008年2月17日星期日  16:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本\16684421.rar'
C:\Documents and Settings\Administrator\桌面\样本\16684421.rar
  [0] Archive type: RAR
  --> 16684421.sys
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> udi.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!

End of the scan: 2008年2月17日星期日  16:36
Used time: 00:23 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   2 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-17 17:38:30

F:\virus\16684421.rar » RAR » 16684421.sys - Win32/Nulprot.A worm
F:\virus\16684421.rar » RAR » udi.exe - Win32/Nulprot trojan

显示全部楼层 · 发表于 2008-2-17 17:38:57

[Found application] <W32/Mywebsearch.F.gen!Eldorado (dropper, not disinfectable, generic)> F:\virus\16684421.rar->16684421.sys->(embedded)
[Found application] <W32/Mywebsearch.F.gen!Eldorado (dropper, not disinfectable, generic)> F:\virus\16684421.rar->udi.exe->(embedded)->(embedded)
[Contains infected objects] F:\virus\16684421.rar
[Quarantined] F:\virus\16684421.rar->udi.exe->(embedded)->(embedded)

显示全部楼层 · 发表于 2008-2-17 18:46:59

mcafee miss

显示全部楼层 · 发表于 2008-2-17 19:08:36

16684421.sys
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\16684421.rar
Status: 已发现病毒
病毒: Trojan-Proxy.Win32.Saturn.ac (KAV 引擎), Backdoor.Tofsee.G (BD 引擎)
对象: udi.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\16684421.rar
Status: 已发现病毒
病毒: Trojan-Proxy.Win32.Saturn.af (KAV 引擎), Backdoor.Tofsee.G (BD 引擎)

显示全部楼层 · 发表于 2008-2-17 19:56:53

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Proxy.Win32.Agent.nu
病毒： Worm.Mail.Win32.Zhelatin.gm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.31.50

显示全部楼层 · 发表于 2008-2-17 22:14:36

微点发现病毒这毒应该可以过卡巴7主动防御

显示全部楼层 · 发表于 2008-2-17 22:38:34

avast found Win32:Nulprot-B and Win32:Nulprot-B

[病毒样本] 覆盖SYS..

3/2

本帖子中包含更多资源