5样本

显示全部楼层 · 发表于 2007-4-5 00:49:22

beta蜘蛛2个, 习惯就好,,,,,

~tmp5324.rar\~tmp5324.exe;C:\Documents and Settings\Administrator\桌面\桌面.rar\~tmp5324.rar;Probably DLOADER.Trojan;;
~tmp5324.rar;C:\Documents and Settings\Administrator\桌面\桌面.rar;Archive contains infected objects;;
directdb.rar\directdb.exe;C:\Documents and Settings\Administrator\桌面\桌面.rar\directdb.rar;Probably DLOADER.Trojan;;
directdb.rar;C:\Documents and Settings\Administrator\桌面\桌面.rar;Archive contains infected objects;;
桌面.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-4-5 00:58:14

Scan performed at: 2007-4-5 0:58:17
Scanning Log
NOD32 version 2168 (20070404) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面
Operating memory - is OK

Date: 5.4.2007 Time: 00:58:27
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面\
C:\Documents and Settings\EQ2\桌面\桌面\c0nime.rar ?RAR ?c0nime.exe - a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\桌面\directdb.rar ?RAR ?directdb.exe - probably a variant of Win32/TrojanDownloader.Agent.BKP trojan
C:\Documents and Settings\EQ2\桌面\桌面\Servere.rar ?RAR ?Servere.exe - a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\桌面\TempE.rar ?RAR ?TempE.exe - a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\桌面\~tmp5324.rar ?RAR ?~tmp5324.exe - probably a variant of Win32/TrojanDownloader.Agent.BKP trojan
Number of scanned files: 10
Number of threats found: 5
Number of files cleaned: 5
Time of completion: 00:58:28 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-4-5 02:12:52

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ky 文件: C:\Documents and Settings\Deric Yeoh\桌面\桌面.rar/TempE.rar/TempE.exe//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ky 文件: C:\Documents and Settings\Deric Yeoh\桌面\桌面.rar/c0nime.rar/c0nime.exe//UPX

KIS只有两个.

显示全部楼层 · 发表于 2007-4-5 03:39:39

红伞全启发

Starting the file scan:

Begin scan in 'C:\Documents and Settings\FEAR\My Documents\桌面.rar'
C:\Documents and Settings\FEAR\My Documents\桌面.rar
  [0] Archive type: RAR
--> ~tmp5324.rar
   [1] Archive type: RAR
   --> ~tmp5324.exe
      [DETECTION] Contains suspicious code HEUR/Malware
--> Servere.rar
   [1] Archive type: RAR
   --> Servere.exe
      [DETECTION] Contains suspicious code HEUR/Malware
--> TempE.rar
   [1] Archive type: RAR
   --> TempE.exe
      [DETECTION] Contains suspicious code HEUR/Malware
--> c0nime.rar
   [1] Archive type: RAR
   --> c0nime.exe
      [DETECTION] Contains suspicious code HEUR/Malware
--> directdb.rar
   [1] Archive type: RAR
   --> directdb.exe
      [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '46429649.qua'!

[ 本帖最后由 KAV-Longhorn 于 2007-4-5 03:40 编辑 ]

显示全部楼层 · 发表于 2007-4-5 18:28:14

显示全部楼层 · 发表于 2007-4-5 18:30:23

已检测

[病毒样本] 5样本

本帖子中包含更多资源

nod32全灭

微点全灭

本帖子中包含更多资源

本帖子中包含更多资源