1只

显示全部楼层 · 发表于 2009-7-21 13:51:02

http://www.virscan.org/report/9cead9c387c9f05d8c86c113459ac26a.html

显示全部楼层 · 发表于 2009-7-21 14:00:12

过NOD32 红伞

显示全部楼层 · 发表于 2009-7-21 14:00:25

2009-07-21 13:59:45 创建文件操作:阻止
进程路径:E:\生日礼物\生日礼物.EXE
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\hello.vbe
触发规则:所有程序规则->Documents and Settings文件夹设置->?:\Documents and Settings\*\*菜单\程序\启动\*

2009-07-21 13:59:45 创建文件操作:阻止
进程路径:E:\生日礼物\生日礼物.EXE
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\hello.vbe
触发规则:所有程序规则->Documents and Settings文件夹设置->?:\Documents and Settings\*\*菜单\程序\启动\*

显示全部楼层 · 发表于 2009-7-21 14:07:56

FS 杀之

显示全部楼层 · 发表于 2009-7-21 14:09:48

Heur:TrojanDropper.WinRar

显示全部楼层 · 发表于 2009-7-21 14:11:04

PRODNAME1
PRODNAME2
访问已被拒绝
无法获取请求的网址

试图获取的网址(URL):

http://bbs.kafan.cn/attachment.php?aid=
585322&k=daa39b30f33a4d13f991558c29145a0
e&t=1248156632

包含下列威胁:

请求的对象已被感染下列病毒:
Trojan.Win32.Chifrax.a
发生于:
2009/7/21 14:10:47
Kaspersky Internet Security 2010

显示全部楼层 · 发表于 2009-7-21 14:41:08

卡巴
2009-7-21 14:40:14 检测到威胁: Trojan.Win32.Chifrax.a TTraveler http://bbs.kafan.cn/attachment.p ... b0&t=1248158413

显示全部楼层 · 发表于 2009-7-21 15:43:35

瑞星2010
Trojan.Win32.Generic.11EB1B27

显示全部楼层 · 发表于 2009-7-21 15:44:46

?Filename Result
########.exe MALWARE

The file '########.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Chifrax.B. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

[病毒样本] 1只

本帖子中包含更多资源

kv