vir(x6)

小邪邪

vir(x6)

yeandwo

avast  2个

change_018

avira kill 4

Starting the file scan:

Begin scan in 'E:\Sandbox\Administrator\DefaultBox\user\current\桌面\vir'
E:\Sandbox\Administrator\DefaultBox\user\current\桌面\vir\vir\vir1.exe
    [DETECTION] Is the TR/Agent.AS.20 Trojan
    [NOTE]      The file was deleted!
E:\Sandbox\Administrator\DefaultBox\user\current\桌面\vir\vir\vir3.exe
    [DETECTION] Contains HEUR/Crypted suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      The file was moved to '49a2d50d.qua'!
E:\Sandbox\Administrator\DefaultBox\user\current\桌面\vir\vir\vir4.exe
    [DETECTION] Contains HEUR/Crypted suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      The file was moved to '480bf79e.qua'!
E:\Sandbox\Administrator\DefaultBox\user\current\桌面\vir\vir\vir5.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!

挪威的冬天

vir 6 不是

syfwxmh

TO KL

woai_jolin

2008-11-29 13:40:56        Real-time file system protection        file        G:\v\a\vir\vir5.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-29 13:40:55        Real-time file system protection        file        G:\v\a\vir\vir4.exe        Win32/PSW.OnLineGames.NNU trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-29 13:40:55        Real-time file system protection        file        G:\v\a\vir\vir3.exe        Win32/PSW.OnLineGames.NNU trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-29 13:40:55        Real-time file system protection        file        G:\v\a\vir\vir2.exe        Win32/Adware.Virtumonde application        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-29 13:40:54        Real-time file system protection        file        G:\v\a\vir\vir1.exe        Win32/Agent.OLH trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

kingmuro

lingbo110120

你上报了没啊？
算了 还是我来吧

lingbo110120

6不是？
那就是NOD通杀？

我还把6上报了..

jordanpchome

a-squared Anti-Malware -版本 4.0
上次更新: 2008/11/29 下午 08:19:03

扫瞄设置:

对像: C:\Documents and Settings\Administrator\桌面\vir
扫瞄文件: 开
启发式扫瞄: 开
ADS扫瞄: 开

扫瞄开始于:        2008/11/29 下午 08:20:17

C:\Documents and Settings\Administrator\桌面\vir\vir2.exe         已检测: Trojan.Win32.Vundo!IK
C:\Documents and Settings\Administrator\桌面\vir\vir3.exe         已检测: Worm.Win32.Viking!IK
C:\Documents and Settings\Administrator\桌面\vir\vir4.exe         已检测: Worm.Win32.Viking!IK
C:\Documents and Settings\Administrator\桌面\vir\vir6.exe         已检测: Email-Worm.Win32.Brontok.dr!IK

已扫瞄

文件:         6

已发现

文件:         4

-----------------------
TO a2