发3个

显示全部楼层 · 发表于 2007-3-4 13:06:54

3个
大家玩

显示全部楼层 · 发表于 2007-3-4 13:17:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\photo album'
C:\Documents and Settings\Administrator\My Documents\photo album\
  photo album.scr
   [DETECTION] Contains signature of the worm WORM/RBot.85484
   [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\unknown@hotmail.zip'
C:\Documents and Settings\Administrator\My Documents\
  unknown@hotmail.zip
[0] Archive type: ZIP
--> unknown@hotmail.com
      [DETECTION] Contains signature of the worm WORM/Rbot.OQ
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\winup.rar'
C:\Documents and Settings\Administrator\My Documents\
  winup.rar
[0] Archive type: RAR
--> winup.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.A
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-4 13:21:49

McAfee 已偵測到.....。

詳細資料
偵測: W32/Sdbot.worm.gen.z (病毒),
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\photo album.scr

詳細資料
偵測: W32/Gaobot.worm.gen.e (病毒),
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\unknown@hotmail.com

詳細資料
名稱: Adware-Henbang
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\winup.exe

显示全部楼层 · 发表于 2007-3-4 13:26:58

费尔不能杀第一个

显示全部楼层 · 发表于 2007-3-4 13:32:16

第一个密码是什么?
下面两个费尔查出来了,一个广告,一个木马

显示全部楼层 · 发表于 2007-3-4 13:32:57

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 3/2/2007
Start time: 3/4/2007 15:36
Engine(s): Engine A (AVK 17.3050), Engine B (BD 17.2113)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: photo album.scr
In archive: C:\Documents and Settings\Administrator\桌面\photo album.zip
Status: Suspected virus
Virus: Password-protected-EXE (Engine A)
Object: photo album.zip
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Password-protected-EXE (Engine A)
Object: unknown@hotmail.com
In archive: C:\Documents and Settings\Administrator\桌面\unknown@hotmail.zip
Status: Virus detected
Virus: Backdoor.Win32.Rbot.oq (Engine A), Backdoor.Rbot.OQ (Engine B)
Object: unknown@hotmail.zip
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus removed
Virus: Backdoor.Win32.Rbot.oq (Engine A), Backdoor.Rbot.OQ (Engine B)
Object: winup.exe
In archive: C:\Documents and Settings\Administrator\桌面\winup.rar
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Hengbang.a (Engine A), Trojan.Banghen.A (Engine B)
Object: winup.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: not-a-virus:AdWare.Win32.Hengbang.a (Engine A), Trojan.Banghen.A (Engine B)
Analysis complete: 3/4/2007 15:36
3 files checked
3 infected files detected
0 suspected files detected

[ 本帖最后由 jlennon 于 2007-3-4 15:37 编辑 ]

显示全部楼层 · 发表于 2007-3-4 13:33:25

原帖由 zzh161 于 2007-3-4 13:26 发表
费尔不能杀第一个

第一个要密码

显示全部楼层 · 发表于 2007-3-4 13:39:53

Scan performed at: 2007-3-4 13:36:04
Scanning Log
NOD32 version 2093 (20070303) NT
Command line: C:\Documents and Settings\user\桌面\photo album\photo album.scr C:\Documents and Settings\user\桌面\photo album\unknown@hotmail.com C:\Documents and Settings\user\桌面\photo album\winup.exe
E:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK - Error reading disk sectorError reading disk sectorError reading disk sector

Date: 4.3.2007 Time: 13:36:18
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\user\桌面\photo album\photo album.scr; C:\Documents and Settings\user\桌面\photo album\unknown@hotmail.com; C:\Documents and Settings\user\桌面\photo album\winup.exe
C:\Documents and Settings\user\桌面\photo album\photo album.scr - Win32/Rbot.DSJ trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\user\桌面\photo album\unknown@hotmail.com - Win32/Rbot trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\user\桌面\photo album\winup.exe - is OK
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 13:36:18 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-4 13:40:43

没密码也一样搞定

显示全部楼层 · 发表于 2007-3-4 15:16:33

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-3-4
开始时间: 2007-3-4 15:16
引擎: KAV 引擎 (AVK 16.10153), BD 引擎 (BD 16.6079)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: photo album.scr
在压缩档案里: C:\Documents and Settings\Administrator\桌面\1\photo album.zip
Status: 可疑病毒
病毒: Password-protected-EXE (KAV 引擎)
对象: photo album.zip
路径: C:\Documents and Settings\Administrator\桌面\1
Status: 可疑病毒
病毒: Password-protected-EXE (KAV 引擎)
对象: unknown@hotmail.com
在压缩档案里: C:\Documents and Settings\Administrator\桌面\1\unknown@hotmail.zip
Status: 已发现病毒
病毒: Backdoor.Win32.Rbot.oq (KAV 引擎), Backdoor.Rbot.OQ (BD 引擎)
对象: unknown@hotmail.zip
路径: C:\Documents and Settings\Administrator\桌面\1
Status: 已发现病毒
病毒: Backdoor.Win32.Rbot.oq (KAV 引擎), Backdoor.Rbot.OQ (BD 引擎)
对象: winup.exe
在压缩档案里: C:\Documents and Settings\Administrator\桌面\1\winup.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.a (KAV 引擎), Trojan.Banghen.A (BD 引擎)
对象: winup.rar
路径: C:\Documents and Settings\Administrator\桌面\1
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.a (KAV 引擎), Trojan.Banghen.A (BD 引擎)
扫描完成: 2007-3-4 15:16
已检查 4 个文件
已发现 2 个染毒文件
发现 1 个可疑文件

[病毒样本] 发3个

本帖子中包含更多资源