睡觉去

醉一生爱妍

明天继续

http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/maio.exe	C:\Conf\msoft.exe
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/c1.bmp	C:\Conf\c1.bmp
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/c2.bmp	C:\Conf\c2.bmp
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/c3.bmp	C:\Conf\c3.bmp
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/bc.bmp	C:\Conf\bc.bmp
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/1.jpg	C:\Conf\1.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/15.bmp	C:\Conf\15.bmp
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/tec.jpg	C:\Conf\tec.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/tab.bmp	C:\Conf\tab.bmp
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/13.bmp	C:\Conf\13.bmp
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/3.jpg	C:\Conf\3.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/cax2.jpg	C:\Conf\cax2.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/ie.ico	C:\Conf\ie.ico
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/2.jpg	C:\Conf\2.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/4.jpg	C:\Conf\4.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/5.jpg	C:\Conf\5.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/fr.jpg	C:\Conf\fr.jpg
http://www.rotarymilanosudest.com/site_access/bollettini/2007-2008/5.exe	C:\Conf\5.exe

sam.to

已偵測: 特洛伊木馬程式 Trojan-Spy.Win32.Banbra.azn        檔案: C:\Documents and Settings\kato9096\桌面\maio.exe3//MPRESS

5.exe to kl

这些jpg,bmp好像沒有可疑

Kitman

Begin scan in 'C:\Documents and Settings\Administrator\桌面\2.rar'
C:\Documents and Settings\Administrator\桌面\2.rar
  [0] Archive type: RAR
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Banker.Gen
  --> maio.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      A backup was created as '48bd3e9e.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!

3M多的東西

[ 本帖最后由 Kitman 于 2008-6-8 10:28 编辑 ]

woai_jolin

扫描开始于2008年6月8日 10:44:34
G:\v\新建文件夹\maio.exe,查到病毒: W32/Banbra.AZN!tr.spy, 操作: 删除/隔离
G:\v\新建文件夹\5.exe,查到病毒: Suspicious, 操作: <无>
扫描结束于2008年6月8日 10:44:35
总共扫描了2个文件, 其中感染病毒文件为2个. 总共扫描了0个引导区, 感染的引导区为0个.

sam.to

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

qigang

原帖由 Kitman 于 2008-6-8 10:05 发表
Begin scan in 'C:\Documents and Settings\Administrator\桌面\2.rar'
C:\Documents and Settings\Administrator\桌面\2.rar
  [0] Archive type: RAR
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/S ...

RS20.47.60未杀！