[病毒样本] 2

显示全部楼层 · 发表于 2008-9-12 17:27:45

ed4819f817a6a9a7388f41ef291b9842 patchupdate.exe.tmp1
c33b03baadce2db984db55584faf457d wab.exe.Vir

已刪除: 病毒 Worm.Win32.AutoRun.msr 檔案: C:\Documents and Settings\kato9096\桌面\2~~~~~~~~~\wab.exe.Vir

上报一个到卡巴~~~

显示全部楼层 · 发表于 2008-9-12 18:04:47

Begin scan in 'D:\Virus\2~~~~~~~~~'
D:\Virus\2~~~~~~~~~\2~~~~~~~~~\wab.exe.Vir
[DETECTION] Contains recognition pattern of the WORM/Autorun.LW.8 worm
[NOTE] The file was moved to '492c3d9c.qua'!

显示全部楼层 · 发表于 2008-9-12 18:45:27

病毒 2008-09-12 18:45:16 C:\Documents and Settings\Administrator\桌面\2~~~~~~~~~.rar\2~~~~~~~~~\wab.exe.Vir Win32.Troj.Downloader.if.58880 清除成功

显示全部楼层 · 发表于 2008-9-12 20:15:37

Begin scan in 'C:\Documents and Settings\xu\桌面\2~~~~~~~~~.rar'
C:\Documents and Settings\xu\桌面\2~~~~~~~~~.rar
[0] Archive type: RAR
--> 2~~~~~~~~~\wab.exe.Vir
   [DETECTION] Contains recognition pattern of the WORM/Autorun.LW.8 worm
[NOTE]    A backup was created as '49485dd9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-9-12 20:18:33

wab.exe.Vir Win32:Pakes-OD [Trj]

显示全部楼层 · 发表于 2008-9-12 20:37:05

McAfee 报了个。。

patchupdate.exe.tmp1 no
wab.exe.Vir New Malware.dw

显示全部楼层 · 发表于 2008-9-12 20:38:22

[发现安全风险： ] <W32/OnlineGames.A.gen!GSA (not disinfectable, 普通)> C:\Download Files\2~~~~~~~~~.rar->2~~~~~~~~~\wab.exe.Vir->(NSPack)->(PE_Patch)

---------------------------------------------------------------------
扫描已结束: 2008-9-12, 20:38:02
用时: 0:00:01

扫描结果:

已扫描的文件:    6
已感染的对象:    1
已清除的对象:    0
已隔离的文件:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-9-12 20:39:15

[病毒样本] 2

F-Prot 4.4.4

Norman Virus Control 5.99