[病毒样本] 1X

显示全部楼层 · 发表于 2009-2-11 11:28:32

Begin scan in 'D:\快捷方式DOS.rar'
D:\快捷方式DOS.rar
[0] Archive type: RAR
--> ￐ￂﾽﾨￎￄﾼﾼ￐ (2)\ZVZ.PIF
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as 'af4ba94e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-11 11:29:54

名称: Packed/Upack
类型: Sequence

描述:

文件:
c:\users\administrator\desktop\新建文件夹 (2)\zvz.pif

显示全部楼层 · 发表于 2009-2-11 11:31:46

名字蛮有型以为是杀微点的，看来他不是
程序：
C:\DOCUMENTS AND SETTINGS\\桌面\新建文件夹 (2)\ZVZ.PIF
木马程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\DLL4.TMP
是否删除木马程序及其衍生物？

显示全部楼层 · 发表于 2009-2-11 11:40:18

ZVZ.PIF - Win32/AutoRun.Agent.IE 蠕虫的变种

显示全部楼层 · 发表于 2009-2-11 12:26:51

avast~！

显示全部楼层 · 发表于 2009-2-11 13:38:08

kaba heur !

to kaba kill,waiting for reply。。。

ZVZ.PIF - Worm.Win32.AutoRun.zvg

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 FLogo 于 2009-2-11 13:47 编辑 ]

显示全部楼层 · 发表于 2009-2-11 15:13:55

DR.WEB

D:\Documents and Settings\Administrator\Local Settings\Temp\Rar$DR00.094\新建文件夹 (2)\ZVZ.PIF - probably infected with MULDROP.Trojan
D:\Documents and Settings\Administrator\Local Settings\Temp\Rar$DR00.094\新建文件夹 (2)\ZVZ.PIF\data002 - infected with Trojan.KillProc.1565
D:\Documents and Settings\Administrator\Local Settings\Temp\Rar$DR00.094\新建文件夹 (2)\ZVZ.PIF\data003 - infected with Trojan.KillProc.1565

Archive contains 3 infected items

显示全部楼层 · 发表于 2009-2-11 18:50:05

显示全部楼层 · 发表于 2009-2-11 18:55:36

MVSE 8.5i kill all

[病毒样本] 1X

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源