[病毒样本] 1

显示全部楼层 · 发表于 2008-5-23 10:52:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\bbff.rar'
C:\Documents and Settings\morgan\My Documents\
  bbff.rar
[0] Archive type: RAR
   --> bbff.exe
      [1] Archive type: Runtime Packed
      --> Object
   [WARNING] The file was ignored!
  bbff.rar:Zone.Identifier

End of the scan: 2008年5月22日  19:52
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-5-23 10:53:09

webguard
When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=268997&k=505745593860ebe744be21ab53fdbab4&t=1211511128"
a virus or unwanted program 'HEUR/Crypted' [heuristic] was found.
Action taken: Ignored
启发，上报。

显示全部楼层 · 发表于 2008-5-23 10:59:43

对象: bbff.exe
在压缩档案里: F:\bbff.rar
Status: 已发现病毒
病毒: Dropped:Trojan.PWS.OnLineGames.EO (BD 引擎)

显示全部楼层 · 发表于 2008-5-23 11:29:38

发现病毒: Dropped:Trojan.PWS.OnLineGames.EO

下载网页内容时, 发现病毒.

地址: bbs.kafan.cn

显示全部楼层 · 发表于 2008-5-23 11:43:06

2008-05-23 11:42:29 文件保护(创建文件) 操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\bbff.exe
文件路径:C:\Program Files\Common Files\Microsoft Shared\MSINFO\CCF341F7.dll

显示全部楼层 · 发表于 2008-5-23 11:44:29

Begin scan in 'C:\Documents and Settings\Administrator\桌面\bbff.exe'
C:\Documents and Settings\Administrator\桌面\bbff.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [NOTE]    The file was successfully wiped!
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-23 13:36:03

kv 0

显示全部楼层 · 发表于 2008-5-23 13:38:58

扫描进行于：2008-5-23 13:38:46
扫描日志
NOD32版本 3124 (20080522) NT
命令行： G:\v\bbff.rar
C:\Program Files\Eset\nod32.exe - 是正常的

日期： 23.5.2008 时间：13:38:47
已扫描的磁盘，文件夹及文件：G:\v\bbff.rar
G:\v\bbff.rar ?RAR ?bbff.exe - a variant of Win32/PSW.Delf.VL 木马
已扫描的文件数目：2
已发现的病毒数目：1
已清除病毒的文件数目：1
完成时间： 13:38:53 总扫描时间：6 秒 (00:00:06)

显示全部楼层 · 发表于 2008-5-23 14:09:27

金山毒霸 0

[病毒样本] 1

本帖子中包含更多资源