木马

显示全部楼层 · 发表于 2008-6-26 19:35:55

卡巴斯基免杀木马

不知道是不是的说

http://p.thec.cn/wulin46/炼器宝贝V1.28.rar

显示全部楼层 · 发表于 2008-6-26 19:42:10

卡巴不报,上报看看

显示全部楼层 · 发表于 2008-6-26 19:42:59

Starting the file scan:

Begin scan in 'C:\Documents and Settings\kato9096\桌面\炼器宝贝V1.28.rar'
C:\Documents and Settings\kato9096\桌面\炼器宝贝V1.28.rar
  [0] Archive type: RAR
  --> ￁ﾶￆ￷ﾱﾦﾱﾴV1.28.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Backdoor.Gen Backdoor server programs
   [WARNING] The file was ignored!

End of the scan: Thursday,26 June 2008  19:42
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-6-26 19:44:03

程序:
C:\DOCUMENTS AND SETTINGS\KAFAN\桌面\炼器宝贝V1.28.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\WINDOWNS.EXE
2) C:\WINDOWS.0\SYSTEM32\_WINDOWNS.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-6-26 19:45:40

够直白

显示全部楼层 · 发表于 2008-6-26 19:51:36

对象: ????????V1.28.exe
在压缩档案里: E:\炼器宝贝V1.28.rar
状态: 可疑病毒
病毒: BehavesLike:Win32.ProcessHijack (Avast/BD引擎)

显示全部楼层 · 发表于 2008-6-26 19:55:30

显示全部楼层 · 发表于 2008-6-26 20:02:50

Begin scan in 'C:\Documents and Settings\Administrator\桌面\炼器宝贝V1.28.rar'
C:\Documents and Settings\Administrator\桌面\炼器宝贝V1.28.rar
  [0] Archive type: RAR
发  --> ￁ﾶￆ?ﾱﾦﾱﾴV1.28.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Backdoor.Gen Backdoor server programs
   [NOTE]    The file was deleted!

End of the scan: 2008年6月26日  20:01
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-6-26 20:15:04

.........

显示全部楼层 · 发表于 2008-6-26 20:19:14

多了个这个进程

[病毒样本] 木马

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源