终于中毒了

显示全部楼层 · 发表于 2009-4-22 18:08:10

前天someone把电脑借去正碰是这几天嫌瑞星烦关掉了

结果就中毒了花了2个小时才弄好

在C盘里找到了几个可疑的东东

显示全部楼层 · 发表于 2009-4-22 18:11:35

Starting the file scan:

Begin scan in 'D:\kafan\RvST .EXE'
D:\kafan\RvST .EXE
[DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
[NOTE]    A backup was created as '4a41ee30.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\y260xxxx.CLL'
Begin scan in 'D:\kafan\yxxxx.CLL'
Begin scan in 'D:\kafan\RvST.EXE'
D:\kafan\RvST.EXE
[DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
[NOTE]    A backup was created as '4a41ee31.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月22日  18:13
Used time: 00:01 Minute(s)

The scan has been done completely.

   0 Scanned directories
   4 Files were scanned
   2 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   2 files were deleted
   0 Viruses and unwanted programs were repaired
   2 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   0 Archives were scanned
   0 Warnings
   2 Notes

显示全部楼层 · 发表于 2009-4-22 18:17:29

ALL TO DW

显示全部楼层 · 发表于 2009-4-22 19:09:50

2009-04-22 19:09:44 创建文件操作:阻止并结束进程
进程路径:E:\virus\RvST.EXE
文件路径:C:\Documents and Settings\cc\bt6126.bat
触发规则:应用程序规则->02-允许修改的程序->*.*->*\*.bat

显示全部楼层 · 发表于 2009-4-22 20:28:02

McAfee 报了2个。。

显示全部楼层 · 发表于 2009-4-22 20:31:37

过卡巴

显示全部楼层 · 发表于 2009-4-22 21:10:36

NOD4(4027)全部Pass.

显示全部楼层 · 发表于 2009-4-22 21:16:24

那么恐怖的东西呀！

显示全部楼层 · 发表于 2009-4-22 21:28:05

pctools 1个

显示全部楼层 · 发表于 2009-4-22 21:34:32

卡巴一个没报！！

[病毒样本] 终于中毒了

本帖子中包含更多资源

本帖子中包含更多资源