来自救援区

显示全部楼层 · 发表于 2008-6-29 13:54:21

来自救援区

显示全部楼层 · 发表于 2008-6-29 14:06:54

Sign of "Win32:Agent-QTO [Trj]" has been found in "F:\playsetup.rar\ha_80074.ex" file.
Sign of "Win32:Pophot-AM [Trj]" has been found in "F:\playsetup.rar\wangm.ex\[Upack]\[Embedded#DLL]" file.

显示全部楼层 · 发表于 2008-6-29 14:08:18

Begin scan in 'F:\playsetup'
F:\playsetup\44.ex
   [DETECTION] Is the Trojan horse TR/Drop.Agent.53248
   [NOTE]    The file was deleted!
F:\playsetup\ha_80074.ex
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was deleted!
F:\playsetup\wangm.ex
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-29 14:12:08

NOD32

费尔

miss

显示全部楼层 · 发表于 2008-6-29 14:18:16

卡巴2009

显示全部楼层 · 发表于 2008-6-29 15:24:39

病毒 2008-06-29 15:24:18 C:\Documents and Settings\Administrator\桌面\playsetup.rar\wangm.ex Win32.Troj.SpyDelf.ak.561152 清除成功

显示全部楼层 · 发表于 2008-6-29 18:17:11

显示全部楼层 · 发表于 2008-6-29 18:28:51

[Found possible virus] <W32/Downloader-disguised-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\playsetup.rar->44.ex
[Found downloader] <W32/Downloader.D.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\playsetup.rar->ha_80074.ex
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\playsetup.rar->wangm.ex->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-6-29, 18:28:40
Duration: 0:00:09

Scan result:

Scanned files:    6
Infected objects:    3
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-29 18:51:04

F:\playsetup.rar>>ha_80074.ex TrojanDownloader.Gen.gnfx 木马
F:\playsetup.rar>>wangm.ex Heuri.Suspicious.ERNM 启发式..

显示全部楼层 · 发表于 2008-6-29 19:24:34

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Clicker.Win32.PopHot.dzv
病毒： Trojan.Clicker.Win32.PopHot.dzv

用户来源：互联网

软件版本：20.50.62

[病毒样本] 来自救援区

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4