一支，用NOD32的小心了～

显示全部楼层 · 发表于 2008-7-5 20:25:46

一支，用NOD32的小心了～

显示全部楼层 · 发表于 2008-7-5 20:28:16

显示全部楼层 · 发表于 2008-7-5 20:29:01

显示全部楼层 · 发表于 2008-7-5 20:30:16

[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Download Files\ms.rar->ms.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-7-5, 20:30:05
Duration: 0:00:03

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-7-5 20:31:26

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\ms.rar'
C:\Documents and Settings\Administrator\桌面\ms.rar
  [0] Archive type: RAR
  --> ms.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-5 20:32:45

病毒 2008-07-05 20:32:27 C:\Documents and Settings\Administrator\桌面\ms.rar\ms.exe Win32.Troj.Agent.ks.204800 清除成功

显示全部楼层 · 发表于 2008-7-5 20:34:01

MicroVita AntiSpyware
_____________________________________________

         风暴微塔反间谍 T2
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

[C:\Documents and Settings\Administrator\桌面\ms.rar]
                  …………引擎[2]发现病毒:Win32.Unknow
OK  扫描完毕！

显示全部楼层 · 发表于 2008-7-5 20:35:54

00009718 08009718    0 net stop "Security Center"
00009734 08009734    0 net stop "Windows Firewall/Internet Connection Sharing (ICS)"
00009774 08009774    0 net stop System Restore Service
000097E0 080097E0    0 sc config ekrn start= disabled
00009800 08009800    0 taskkill /im ekrn.exe /f
0000981C 0800981C    0 taskkill /im egui.exe /f
00009838 08009838    0 sc config NOD32krn start= disabled
0000985C 0800985C    0 taskkill /im nod32krn.exe /f
0000987C 0800987C    0 taskkill /im nod32kui.exe /f
000098F8 080098F8    0 Fuckyou!

00007A84 08007A84    0 SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\
00007AD0 08007AD0    0 TASKMAN.EXE
00007ADC 08007ADC    0 Debugger
00007BD0 08007BD0    0 360tray.exe
00007BE4 08007BE4    0 360safe.exe
00007BF8 08007BF8    0 360safebox.exe
00007C10 08007C10    0 safeboxTray.exe
00007C28 08007C28    0 avp.exe
00007C38 08007C38    0 Rav.exe
00007C48 08007C48    0 RavMon.exe
00007C5C 08007C5C    0 RavMonD.exe
00007C70 08007C70    0 CCenter.exe
00007C84 08007C84    0 RavStub.exe
00007C98 08007C98    0 RavTask.exe
00007CAC 08007CAC    0 SmartUp.exe
00007CC0 08007CC0    0 runiep.exe
00007CD4 08007CD4    0 rfwmain.exe
00007CE8 08007CE8    0 rfwProxy.exe
00007D00 08007D00    0 rfwsrv.exe
00007D14 08007D14    0 rfwstub.exe
00007D28 08007D28    0 rfwcfg.exe
00007D3C 08007D3C    0 ekrn.exe
00007D50 08007D50    0 egui.exe
00007D64 08007D64    0 nod32krn.exe
00007D7C 08007D7C    0 nod32kui.exe

显示全部楼层 · 发表于 2008-7-5 20:43:09

已发过

显示全部楼层 · 发表于 2008-7-5 20:53:48

[病毒样本] 一支，用NOD32的小心了～

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4

本帖子中包含更多资源