来他一包流氓

显示全部楼层 · 发表于 2009-8-3 10:50:27

瑞星2009 发现一个！！

显示全部楼层 · 发表于 2009-8-3 11:12:31

Start of the scan: Monday, 3 August, 2009  11:11

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Tim\桌面\virus\ie.rar'
C:\Documents and Settings\Tim\桌面\virus\ie.rar
  [0] Archive type: RAR
[NOTE]    A backup was created as '4aa455e3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
--> tan.exe
   [DETECTION] Is the TR/Crypt.Morphine.Gen Trojan
--> ie.exe
   [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan

End of the scan: Monday, 3 August, 2009  11:11
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   5 Files were scanned
   2 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   1 files were deleted
   0 Viruses and unwanted programs were repaired
   1 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   2 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2009-8-3 11:23:19

费尔KILL

显示全部楼层 · 发表于 2009-8-3 12:33:03

原帖由 qreasb 于 2009-8-3 10:50 发表
瑞星2009 发现一个！！

瑞星可以去死了，我这免费的MSE都发现了2个。

显示全部楼层 · 发表于 2009-8-3 15:19:42

DW
\ie.exe - infected with Trojan.StartPage.1646
tan.exe - infected with BackDoor.WebDor

显示全部楼层 · 发表于 2009-8-3 18:00:13

木马名称：Trojan-Downloader.Win32.Delf.rtn
程序：
F:\过微点\IE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称：Trojan-Downloader.Win32.Delf.rwz
程序：
F:\过微点\TAN.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

1 to MP

显示全部楼层 · 发表于 2009-8-3 18:05:29

Dr.web阻止
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\ZMHFCYCC\ie[1].rar\ie.exe - 已感染 Trojan.StartPage.1646
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\ZMHFCYCC\ie[1].rar\tan.exe - 已感染 BackDoor.WebDor

压缩包含 2 个被感染的对象

显示全部楼层 · 发表于 2009-8-3 18:21:07

...看到startpage[:27:]

显示全部楼层 · 发表于 2009-8-3 18:32:43

显示全部楼层 · 发表于 2009-8-3 19:18:52

360杀毒都过不了

[病毒样本] 来他一包流氓

本帖子中包含更多资源

本帖子中包含更多资源