0fr6rhfoks.cmd [md5:bf1fc43]

显示全部楼层 · 发表于 2008-5-31 20:23:00

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\0fr6rhfoks.rar<RAR>:0fr6rhfoks.cmd <- Trojan.Spy.Banker.Jth : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-5-31 20:23:50

启发了10秒

[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\0fr6rhfoks.rar->0fr6rhfoks.cmd->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-5-31, 20:23:26
Duration: 0:00:10

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-31 20:35:40

信息 2008-05-31  20:35:34 金山毒霸主程序退出
信息 2008-05-31  20:35:34 金山毒霸主程序退出
信息 2008-05-31  20:35:33 您此次查毒清除了1个病毒
信息 2008-05-31  20:35:33 您此次查毒共查出1个病毒以及危险代码
信息 2008-05-31  20:35:33 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个
信息 2008-05-31  20:35:33 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-31  20:35:33 C:\Documents and Settings\Administrator\桌面\0fr6rhfoks.rar\0fr6rhfoks.cmd Win32.Hack.UpackT.a.15981 清除成功

显示全部楼层 · 发表于 2008-6-2 20:01:50

The file '0fr6rhfoks.cmd' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.Banker.NUH. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-6-2 21:52:46

[病毒样本] 0fr6rhfoks.cmd [md5:bf1fc43]

ArcaVir2008

F-Prot 4.4.4

本帖子中包含更多资源