一支

显示全部楼层 · 发表于 2007-4-5 20:55:35

创建时间键名称原数据新数据创建者
2007-04-05 20:47:07 HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WINDRIVES C:\WINDOWS\WINDRIVES.EXE E:\SOFT_KILLER\WINDRIVERS\WINDRIVERS.EXE

扫扫看

[ 本帖最后由 Nblock 于 2007-4-5 21:03 编辑 ]

显示全部楼层 · 发表于 2007-4-5 21:24:28

卡巴一个也没有拦截
不知道其他的杀软怎么样？？

显示全部楼层 · 发表于 2007-4-5 21:25:27

NOD32和PCC無反應

显示全部楼层 · 发表于 2007-4-5 22:00:33

Dr.web掃到的

显示全部楼层 · 发表于 2007-4-5 22:04:29

原帖由 harry_chang2003 于 2007-4-5 21:25 发表
NOD32和PCC無反應

什么叫做没反应？？？？？
Scan performed at: 2007-4-5 22:04:28
Scanning Log
NOD32 version 2169 (20070405) NT
Command line: C:\Documents and Settings\EQ2\桌面\windrivers1.rar C:\Documents and Settings\EQ2\桌面\windrivers.rar
Operating memory - is OK
Date: 5.4.2007 Time: 22:04:33
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\windrivers1.rar; C:\Documents and Settings\EQ2\桌面\windrivers.rar
C:\Documents and Settings\EQ2\桌面\windrivers1.rar ?RAR ?windrivers.exe - a variant of Win32/Small.NBA worm
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 22:04:34 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-4-5 22:51:24

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\windrivers1.rar'
C:\Documents and Settings\morgan\My Documents\
  windrivers1.rar
[0] Archive type: RAR
--> windrivers.exe
Begin scan in 'C:\Documents and Settings\morgan\My Documents\windrivers.rar'
C:\Documents and Settings\morgan\My Documents\
  windrivers.rar
[0] Archive type: RAR
--> windrivers.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/PESpin). Please verify the origin of the file
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-4-5 23:19:57

原帖由 EQ2 于 2007-4-5 22:04 发表

什么叫做没反应？？？？？
Scan performed at: 2007-4-5 22:04:28
Scanning Log
NOD32 version 2169 (20070405) NT
Command line: C:\Documents and Settings\EQ2\桌面\windrivers1.rar C:\Documents and ...

抱歉!测试时忘了开启发式

显示全部楼层 · 发表于 2007-4-6 01:23:28

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-4
Start time: 2007-4-6 1:22
Engine(s): KAV engine (AVK 17.3765), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: windrivers.exe
In archive: C:\Documents and Settings\Administrator\桌面\windrivers1.rar
Status: Virus detected
Virus: Trojan.Drivewin.A (BD-Engine)
Object: windrivers1.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan.Drivewin.A (BD-Engine)
Analysis complete: 2007-4-6 1:22
2 files checked
1 infected files detected
0 suspected files detected

一支

本帖子中包含更多资源