“艾妮”(Win32.LwyMum.h)感染型病毒归来劫持杀软件

显示全部楼层 · 发表于 2008-6-3 17:45:55

D:\firefox download\艾妮病毒.rar > RAR > autorun.inf - INF/Autorun 病毒
D:\firefox download\艾妮病毒.rar > RAR > ntldr.exe - Win32/Anilogo.NAA 蠕虫

显示全部楼层 · 发表于 2008-6-3 18:38:09

kav 1

显示全部楼层 · 发表于 2008-6-3 18:40:52

说实在话。。。
好久没有看见灰色的图了。。。

不知道是啥意思。。。

显示全部楼层 · 发表于 2008-6-3 19:53:41

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Suspicious.Worm.Win32.Autorun.a

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.12

显示全部楼层 · 发表于 2008-6-3 21:23:59

显示全部楼层 · 发表于 2008-6-3 21:25:00

TIS2008 2/2

"21:25" "手动扫描" "文件" "POSSIBLE_AUTORUN" "C:\Documents and Settings\sky\桌面\艾妮病毒\autorun.inf" "删除成功" ""
"21:25" "手动扫描" "文件" "PE_MUMAWOW.AO-O" "C:\Documents and Settings\sky\桌面\艾妮病毒\ntldr.exe" "删除成功" ""

显示全部楼层 · 发表于 2008-6-3 21:26:57

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\艾妮病毒.rar<RAR>:autorun.inf <- Trojan.Autorun.Fn : No action
C:\Documents and Settings\All Users\Documents\Test\艾妮病毒.rar<RAR>:ntldr.exe<UPack>:ntldr.exe <- Worm.Autorun.Bkx : No action

Scanned objects : 4

Infected objects : 2

显示全部楼层 · 发表于 2008-6-3 21:27:14

[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\艾妮病毒.rar->ntldr.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-6-3, 21:27:07
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-3 23:35:51

ACCESS DENIED
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.p ... 54&t=1212507277

The folowing error was encountered:

The requested object is INFECTED. The following viruses Worm.Win32.AutoRun.bkx were found

Please contact your service provider if you feel this is incorrect.

--------------------------------------------------------------------------------

Generated Tue Jun 03 23:36:37 2008 by 卡巴斯基反病毒软件 7.0

显示全部楼层 · 发表于 2008-6-3 23:56:46

%windir%\fonts\system有这个文件夹么/

[病毒样本] “艾妮”(Win32.LwyMum.h)感染型病毒归来劫持杀软件

本帖子中包含更多资源

3/1

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

[病毒样本] “艾妮”(Win32.LwyMum.h)感染型病毒归来 劫持杀软件

本帖子中包含更多资源

3/1

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

[病毒样本] “艾妮”(Win32.LwyMum.h)感染型病毒归来劫持杀软件