病毒

显示全部楼层 · 发表于 2007-3-3 12:08:27

金山报

[ 本帖最后由 kp2006 于 2007-3-3 12:10 编辑 ]

显示全部楼层 · 发表于 2007-3-3 12:36:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\GHOST'
C:\Documents and Settings\Administrator\My Documents\GHOST\
  GHOST.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-3 12:38:44

显示全部楼层 · 发表于 2007-3-3 13:17:25

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 3/2/2007
Start time: 3/3/2007 13:16
Engine(s): Engine A (AVK 17.3050), Engine B (BD 17.2113)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: GHOST.EXE
      In archive: C:\Documents and Settings\Administrator\桌面\GHOST[1].part1.rar
      Status: Virus detected
      Virus: Worm.Win32.Viking.hx (Engine A), GenPack:Win32.Worm.Viking.GL (Engine B)
Object: GHOST[1].part1.rar
      Path: C:\Documents and Settings\Administrator\桌面
      Status: Move file into quarantine
      Virus: Worm.Win32.Viking.hx (Engine A), GenPack:Win32.Worm.Viking.GL (Engine B)
Analysis complete: 3/3/2007 13:16
2 files checked
1 infected files detected
0 suspected files detected

[ 本帖最后由 jlennon 于 2007-3-3 13:18 编辑 ]

显示全部楼层 · 发表于 2007-3-3 13:41:10

卡巴斯基反病毒6.0The requested URL http://bbs.kpfans.com/attachment.php?aid=38811 is forbidden

显示全部楼层 · 发表于 2007-3-3 15:58:56

有如下生成物
C:\WINNT\RICHDLL.DLL C:\WINNT\LOGO1_.EXE
C:\WINNT\UNINSTALL\RUNDL132.EXE C:\WINNT\LOGO1_.EXE
C:\WINNT\LOGO1_.EXE I:\070303\4\GHOST[1]\GHOST.EXE
C:\WINNT\UNINSTALL\RUNDL132.EXE I:\070303\4\GHOST[1]\GHOST.EXE

同时修改注册表
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ LOAD C:\WINNT\UNINSTALL\RUNDL132.EXE C:\WINNT\UNINSTALL\RUNDL132.EXE C:\WINNT\LOGO1_.EXE
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ LOAD C:\WINNT\UNINSTALL\RUNDL132.EXE I:\070303\4\GHOST[1]\GHOST.EXE

显示全部楼层 · 发表于 2007-3-3 19:15:00

驱逐舰报 Win32.HLLW.Gavir.54

显示全部楼层 · 发表于 2007-3-4 10:30:27

费尔报病毒(Worm.Viking.hx.uxnq)

显示全部楼层 · 发表于 2007-3-4 11:09:33

原帖由 200530040058 于 2007-3-3 12:38 发表
报

卡巴报了

显示全部楼层 · 发表于 2007-3-4 13:44:32

Scan performed at: 2007-3-4 13:40:00
Scanning Log
NOD32 version 2093 (20070303) NT
Command line: C:\Documents and Settings\user\桌面\GHOST[1]\GHOST.EXE
E:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK - Error reading disk sectorError reading disk sectorError reading disk sector

Date: 4.3.2007 Time: 13:40:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\user\桌面\GHOST[1]\GHOST.EXE
C:\Documents and Settings\user\桌面\GHOST[1]\GHOST.EXE - Win32/Viking.CH virus - quarantined - cleaned
Number of scanned files: 1
Number of threats found: 1
Time of completion: 13:40:09 Total scanning time: 0 sec (00:00:00)

病毒

本帖子中包含更多资源

本帖子中包含更多资源

微点拦

本帖子中包含更多资源