卡巴启发，请上报！（NO精品）

显示全部楼层 · 发表于 2009-1-11 14:18:32

用沙盘乱逛，在缓存发现的！（是个网页文件，运行之后，只是一堆乱码！）

显示全部楼层 · 发表于 2009-1-11 14:19:13

C:\Documents and Settings\Administrator\桌面\新建文件夹\0[2].zip > ZIP > 0[2].htm - 未查明的 NewHeur_PE 病毒 - 是已删除对象的一部分

显示全部楼层 · 发表于 2009-1-11 14:19:36

PE文件

不过编写的有点问题

显示全部楼层 · 发表于 2009-1-11 14:19:46

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹\0[2].zip'
C:\Documents and Settings\Administrator\桌面\新建文件夹\0[2].zip
[0] Archive type: ZIP
--> 0[2].htm
   [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
[NOTE]    A backup was created as '499b8fd3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年1月11日  14:19
Used time: 00:03 Minute(s)

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2009-1-11 14:21:17

2009-1-11 14:28:22 拒绝: HEUR:Backdoor.Win32.Generic Firefox http://bbs.kafan.cn/attachment.p ... &t=1231654826/0[2].htm//NSPack

显示全部楼层 · 发表于 2009-1-11 15:43:36

过费尔

TO KV

TO 费尔

显示全部楼层 · 发表于 2009-1-11 16:26:19

a-squared C:\Documents and Settings\Administrator.LY\桌面\0[2].htm 已检测: Trojan-Dropper.Delf!IK

显示全部楼层 · 发表于 2009-1-13 00:29:35

2009/1/13 0:27:42 已清除木马程序 Backdoor.Win32.Hupigon.fngk G:\Temp\Virus\0[2].zip

显示全部楼层 · 发表于 2009-1-13 02:34:58

显示全部楼层 · 发表于 2009-1-13 02:44:11

瑞星杀
至少我明天不用去朋友那里杀这个
AVG杀

[病毒样本] 卡巴启发，请上报！（NO精品）

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 9楼 fzz8848 的帖子