nod32干掉两个

显示全部楼层 · 发表于 2007-4-4 04:31:03

Scan performed at: 2007-4-4 4:28:56
Scanning Log
NOD32 version 2167 (20070403) NT
Command line: C:\Documents and Settings\EQ2\桌面\Downloads_1175609438
Operating memory - is OK
Date: 4.4.2007 Time: 04:28:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Downloads_1175609438\
C:\Documents and Settings\EQ2\桌面\Downloads_1175609438\qq.exe - Win32/TrojanDownloader.Agent.BLH trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\Downloads_1175609438\webpnt.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 2
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 04:29:00 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-4-4 04:50:15

,还不睡觉。

祝贺liverpool晋级欧冠四强，你永远不会独行

显示全部楼层 · 发表于 2007-4-4 04:53:15

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-1
Start time: 2007-4-4 4:53
Engine(s): KAV engine (AVK 17.3690), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: webpnt.exe
In archive: C:\Documents and Settings\Administrator\桌面\Downloads_1175609438.rar
Status: Virus detected
Virus: Trojan-Clicker.Win32.VB.qg (KAV engine)
Object: qq.exe
In archive: C:\Documents and Settings\Administrator\桌面\Downloads_1175609438.rar
Status: Virus detected
Virus: Trojan-Downloader.Win32.Agent.blh (KAV engine)
Object: Downloads_1175609438.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-Clicker.Win32.VB.qg, Trojan-Downloader.Win32.Agent.blh (KAV engine)
Analysis complete: 2007-4-4 4:53
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-4 04:53:22

睡完了。。。。现在正在到处搜样本

显示全部楼层 · 发表于 2007-4-4 04:55:27

我困觉了，刚看完欧冠

显示全部楼层 · 发表于 2007-4-4 04:56:00

目前正在找论坛。。。。。。还有正在制作ATCC的logo

显示全部楼层 · 发表于 2007-4-4 05:10:41

The file Downloads_1175609438.rar appears to be infected with "W32/GENETIK.CA!tr"
飞塔

显示全部楼层 · 发表于 2007-4-4 06:17:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\Downloads_1175609438.rar'
C:\Documents and Settings\morgan\My Documents\
  Downloads_1175609438.rar
[0] Archive type: RAR
--> webpnt.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> qq.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blh
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-4 08:01:37

已删除: 木马程序 Trojan-Clicker.Win32.VB.qg 文件: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3JE9GZ6S\Downloads_1175609438[1].rar\webpnt.exe/ASPack
已删除: 木马程序 Trojan-Downloader.Win32.Agent.blh 文件: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3JE9GZ6S\Downloads_1175609438[1].rar\qq.exe/ASPack

显示全部楼层 · 发表于 2007-4-4 10:17:03

微点杀

[病毒样本] nod32干掉两个

本帖子中包含更多资源

回复 #2 jlennon 的帖子

回复 #4 EQ2 的帖子

回复 #5 jlennon 的帖子

本帖子中包含更多资源