spacecodec.v.1.292

显示全部楼层 · 发表于 2008-7-26 18:22:20

UGuard 完成了在 C:\Documents and Settings\Administrator\桌面\spacecodec[1].v.1.292 上的扫描。
================
================
扫描文件数： 10
本次扫描没有发现威胁。
实际文件数： 1
扫描时间： 0-00-00 00:00:02:0390
威胁比率： 0%

显示全部楼层 · 发表于 2008-7-26 18:26:07

The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
317935&k=dba633813104cb2058d344c3fc73cf5
6&t=1217067956

The following error was encountered:

The requested object is INFECTED with the following viruses: Trojan.Win32.Pakes.jmp

Please contact your service provider if you consider it incorrect.
Generated:
Sat Jul 26 18:25:41 2008
Kaspersky Internet Security 2009

显示全部楼层 · 发表于 2008-7-26 18:43:19

Begin scan in 'C:\Documents and Settings\Administrator\桌面\spacecodec.v.1.292.zip'
C:\Documents and Settings\Administrator\桌面\spacecodec.v.1.292.zip
[0] Archive type: ZIP
--> spacecodec.v.1.292.exe
   [DETECTION] Contains recognition pattern of the DR/Dldr.DNSChanger.Gen dropper
[NOTE]    A backup was created as '48ec0028.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-26 18:44:01

Win32:DNSChanger-VR [Trj]

显示全部楼层 · 发表于 2008-7-26 20:59:20

McAfee miss

显示全部楼层 · 发表于 2008-7-27 00:34:18

费尔杀

显示全部楼层 · 发表于 2008-7-27 11:04:13

大A小A一起KO。。。不过每次都是红伞胜小A都没的隔离。。木马！

显示全部楼层 · 发表于 2008-7-27 12:08:57

木马名称:Trojan.Win32.Pakes.hft

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\VIDXCORE.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Pakes.hfr

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\NSR1D.TMP\DCRYPTDLL.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] spacecodec.v.1.292

本帖子中包含更多资源