可疑的注册机

显示全部楼层 · 发表于 2008-11-11 22:25:22

Begin scan in 'E:\Download\Virus\Temp.rar'
E:\Download\Virus\Temp.rar
[0] Archive type: RAR
--> jah31993.exe
[DETECTION] Is the TR/Drop.Agent.zea Trojan
--> tmp53A.tmp
[DETECTION] Is the TR/Agent.AKWY.7 Trojan
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-11-11 23:10:35

The file 'Keygen.Adobe.Fireworks.CS3.Portableb3199.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Dropper. In general this kind of programs do not contain harmul functions by themselves. However they usually create other harmful programs and execute them right away. Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-11-11 23:16:30

11/11/2008 23:16:14 已刪除: Trojan-Dropper.Win32.Agent.zea C:\Documents and Settings\kato9096\桌面\Temp.rar/jah31993.exe

11/11/2008 23:16:14 已刪除: Trojan.Win32.Small.ymw C:\Documents and Settings\kato9096\桌面\Temp.rar/tmp53A.tmp

显示全部楼层 · 发表于 2008-11-12 09:48:25

卡巴报木马。

显示全部楼层 · 发表于 2008-11-12 17:12:31

伪装成注册机的病毒，BS一下。

显示全部楼层 · 发表于 2008-11-12 22:01:22

nis09扫描没报
安装报了
需要重启恢复

[ 本帖最后由 yager 于 2008-11-12 22:11 编辑 ]

[病毒样本] 可疑的注册机

回复 4楼 tvuser2007 的帖子

回复 4楼 tvuser2007 的帖子