发个自动运行病毒的样本

显示全部楼层 · 发表于 2007-3-27 20:50:06

杀了

显示全部楼层 · 发表于 2007-3-27 20:54:33

Starting the file scan:

Begin scan in 'G:\autorun1.rar'
G:\autorun1.rar
  [0] Archive type: RAR
  --> explorer.exe
   [DETECTION] Is the Trojan horse TR/Tiny.E
  --> fooool.exe
   [DETECTION] Is the Trojan horse TR/Tiny.E.1
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-27 21:38:40

detected: Trojan program Trojan.Win32.Tiny.e URL: http://bbs.kafan.cn/attachment.php?aid=48269//explorer.exe
这个东东杀软全报啊

显示全部楼层 · 发表于 2007-3-27 21:50:15

Scan performed at: 2007-3-27 21:50:27
Scanning Log
NOD32 version 2147 (20070327) NT
Command line: C:\Documents and Settings\EQ2\桌面\autorun1.rar
Operating memory - is OK

Date: 27.3.2007 Time: 21:50:32
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\autorun1.rar
C:\Documents and Settings\EQ2\桌面\autorun1.rar ?RAR ?explorer.exe - Win32/Tiny.E trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\autorun1.rar ?RAR ?fooool.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 21:50:32 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-3-27 22:51:24

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\autorun1.rar'
C:\Documents and Settings\morgan\My Documents\
  autorun1.rar
[0] Archive type: RAR
--> autorun.inf
--> explorer.exe
      [DETECTION] Is the Trojan horse TR/Tiny.E
      [WARNING] Infected files in archives cannot be repaired!
--> fooool.exe
      [DETECTION] Is the Trojan horse TR/Tiny.E.1
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-27 22:55:06

截了

显示全部楼层 · 发表于 2007-3-27 23:02:07

嘻嘻。。。。微点报警了。。。。。。

显示全部楼层 · 发表于 2007-3-28 07:49:41

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-28, 3:01

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\autorun1.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-28, 7:48:23
---------------------------------------------------------------------

[Found possible virus] <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\autorun1.rar->explorer.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\autorun1.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\autorun1.rar->fooool.exe

---------------------------------------------------------------------
Scan ended: 2007-3-28, 7:48:25
Duration: 0:00:02

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

发个自动运行病毒的样本

本帖子中包含更多资源

本帖子中包含更多资源