火星续1

显示全部楼层 · 发表于 2007-4-5 00:35:20

好像都是下载者
估计很多都能杀挖出来晒晒

显示全部楼层 · 发表于 2007-4-5 00:36:42

Scan performed at: 2007-4-5 0:36:58
Scanning Log
NOD32 version 2168 (20070404) NT
Command line: C:\Documents and Settings\EQ2\桌面\1149.zip C:\Documents and Settings\EQ2\桌面\59.zip
Operating memory - is OK

Date: 5.4.2007 Time: 00:37:02
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\1149.zip; C:\Documents and Settings\EQ2\桌面\59.zip
C:\Documents and Settings\EQ2\桌面\1149.zip ?ZIP ?vccodec.1149.exe ?NSIS ?isecur.dll - Win32/TrojanDownloader.Zlob.AGI trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\59.zip ?ZIP ?truecodec.59.exe ?NSIS ?isecur.dll - Win32/TrojanDownloader.Zlob.AGR trojan - was a part of the deleted object
Number of scanned files: 20
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 00:37:03 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-4-5 00:42:34

mcafee过，AVK杀

显示全部楼层 · 发表于 2007-4-5 00:42:51

truecodec.59.exe\data006;C:\Documents and Settings\Administrator\桌面\59.zip\truecodec.59.exe;Trojan.Popuper;;
truecodec.59.exe;C:\Documents and Settings\Administrator\桌面\59.zip;Archive contains infected objects;;
59.zip;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
vccodec.1149.exe\data007;C:\Documents and Settings\Administrator\桌面\1149.zip\vccodec.1149.exe;Trojan.Popuper;;
vccodec.1149.exe;C:\Documents and Settings\Administrator\桌面\1149.zip;Archive contains infected objects;;
1149.zip;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-4-5 02:18:12

已删除: 木马程序 Trojan-Downloader.Win32.Zlob.asf 文件: C:\Documents and Settings\Deric Yeoh\桌面\59.zip/truecodec.59.exe//UPX//stream//data0006
已删除: 木马程序 Trojan-Downloader.Win32.Zlob.anj 文件: C:\Documents and Settings\Deric Yeoh\桌面\1149.zip/vccodec.1149.exe//UPX//data0007

显示全部楼层 · 发表于 2007-4-5 03:38:15

红伞杀了

Starting the file scan:

Begin scan in 'C:\Documents and Settings\FEAR\My Documents\59.zip'
C:\Documents and Settings\FEAR\My Documents\59.zip
  [0] Archive type: ZIP
  --> truecodec.59.exe
   [DETECTION] Is the Trojan horse TR/Zlob.65745.16
   [INFO]    The file was moved to '4641fed0.qua'!
Begin scan in 'C:\Documents and Settings\FEAR\My Documents\1149.zip'
C:\Documents and Settings\FEAR\My Documents\1149.zip
  [0] Archive type: ZIP
  --> vccodec.1149.exe
   [DETECTION] Is the Trojan horse TR/Zlob.65745.8
   [INFO]    The file was moved to '4647fec8.qua'!

显示全部楼层 · 发表于 2007-4-5 10:47:04

杀了

[病毒样本] 火星续1

本帖子中包含更多资源

本帖子中包含更多资源