?问问

显示全部楼层 · 发表于 2007-3-12 01:58:45

我运行一个手动扫描费尔不报的病毒

注册表监控报实时监控报了动态防御报mppds.exe 36.xxxx可疑

我选在线扫描他自动提交这个文件说这个文件是个木马

我手动扫描这个文件费尔报的启发没报木马

在线扫描是怎么报他木马为什么

显示全部楼层 · 发表于 2007-3-12 01:59:59

Scan performed at: 2007-3-12 2:00:09
Scanning Log
NOD32 version 2107 (20070311) NT
Command line: C:\Documents and Settings\EQ2\桌面\mppds.rar
Operating memory - is OK

Date: 12.3.2007 Time: 02:00:13
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\mppds.rar
C:\Documents and Settings\EQ2\桌面\mppds.rar ?RAR ?mppds.exe - probably a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 02:00:14 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-3-12 03:16:21

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-11
Start time: 2007-3-12 3:16
Engine(s): KAV engine (AVK 17.3208), BD-Engine (BD 17.2388)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: mppds.exe
In archive: C:\Documents and Settings\Administrator\桌面\mppds.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.Agent.ANV (BD-Engine)
Object: mppds.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.Agent.ANV (BD-Engine)
Analysis complete: 2007-3-12 3:16
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-12 07:11:28

驱逐舰
2007-3-12 7:09:31 mppds.rar (S)C:\Documents and Settings\xxx\桌面 Trojan.Packed.49 12

显示全部楼层 · 发表于 2007-3-12 07:35:28

Starting the file scan:

Begin scan in 'D:\mppds.rar'
D:\mppds.rar
  [0] Archive type: RAR
  --> mppds.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLin.ES.820
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-12 10:41:42

病毒是肯定的，只是费尔未能报出具体名，启发报的。

显示全部楼层 · 发表于 2007-3-12 10:43:18

卡巴

显示全部楼层 · 发表于 2007-3-12 12:25:24

关于楼主的提问，去费尔区看看我的帖子就知道了。
我有详细的说明

显示全部楼层 · 发表于 2007-3-12 14:38:00

FS7.0
Result: 1 malware found
Trojan-PSW.Win32.OnLineGames.es (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\mppds.rar\mppds.exe

显示全部楼层 · 发表于 2007-3-12 23:49:41

微点杀

?问问

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源