[病毒样本] 3

显示全部楼层 · 发表于 2008-5-7 07:49:31

C:\Documents and Settings\Administrator\Local Settings\Temp\冒险岛.exe FDDS.Suspect 可疑程序 14992 2008-5-6 19:19:04
D:\My Documents\internetTmp\Temporary Internet Files\Content.IE5\KDIZ8XYZ\x[1].exe TrojanDownloader.Nurech.bd.bmqk 木马 23412 2008-5-6 18:53:23
D:\My Documents\internetTmp\Temporary Internet Files\Content.IE5\0PEFS9M7\r[1].gif JS.Decoder.n 病毒 7024 2008-5-6 17:13:55

显示全部楼层 · 发表于 2008-5-7 07:54:06

The file 'C:\Documents and Settings\morgan\My Documents\罗邵杰1\冒险岛.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was deleted!

The file 'C:\Documents and Settings\morgan\My Documents\罗邵杰1\X[1].EXE'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was deleted!

显示全部楼层 · 发表于 2008-5-7 08:15:38

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\罗邵杰1.rar'
C:\Documents and Settings\Administrator\桌面\罗邵杰1.rar
  [0] Archive type: RAR
--> X[1].EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted

显示全部楼层 · 发表于 2008-5-7 08:19:38

C:\Documents and Settings\Don Johnson\桌面\罗邵杰1.rar » RAR » X[1].EXE - probably a variant of Win32/Jalous worm
C:\Documents and Settings\Don Johnson\桌面\罗邵杰1.rar » RAR » 冒险岛.exe - a variant of Win32/PSW.OnLineGames.MUG trojan

显示全部楼层 · 发表于 2008-5-7 10:34:26

貌似大家的杀软对“GIF”的文件略过啊！

显示全部楼层 · 发表于 2008-5-7 10:47:56

X[1].EXE
在压缩档案里: F:\罗邵杰1.rar
Status: 已发现病毒
病毒: Generic.Malware.P!Pk!g.8A3D1989 (BD 引擎)

显示全部楼层 · 发表于 2008-5-7 10:48:30

微点砍掉

显示全部楼层 · 发表于 2008-5-7 13:08:16

蜘蛛

[扫描路径] E:\VIRUS\罗邵杰.rar
>>E:\VIRUS\罗邵杰.rar\X[1].EXE 已被病毒感染： Trojan.MulDrop.14980
>>E:\VIRUS\罗邵杰.rar\冒险岛.exe 已被病毒感染： Trojan.PWS.Gamania.9748
>>E:\VIRUS\罗邵杰.rar\r[1].gif\javascript.0 - 确定
>>E:\VIRUS\罗邵杰.rar\r[1].gif\JavAscrIpT.1 - 确定
>E:\VIRUS\罗邵杰.rar\r[1].gif - 确定
E:\VIRUS\罗邵杰.rar - 发现压缩文件中有被感染的对象

显示全部楼层 · 发表于 2008-5-7 20:26:52

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GamesOnline.wq

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.43.22

显示全部楼层 · 发表于 2008-5-7 20:31:16

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\罗邵杰1.rar<RAR>:X[1].EXE<UPack>:X[1].EXE <- Variant:Trojan.Agent.Fb : No action

Scanned objects : 8

Infected objects : 1

[病毒样本] 3

本帖子中包含更多资源

本帖子中包含更多资源

7/1

ArcaVir2008