我的杀毒软件都被这个干掉了

显示全部楼层 · 发表于 2007-5-2 16:05:22

自动关闭杀毒软件后，留下的产物

显示全部楼层 · 发表于 2007-5-2 16:11:13

金山

显示全部楼层 · 发表于 2007-5-2 16:13:18

两个都是红伞启发报

D:\system32.rar
  [0] Archive type: RAR
  --> nwizqjsj.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> qjsj100.dll
   [DETECTION] Contains suspicious code HEUR/Malware

显示全部楼层 · 发表于 2007-5-2 16:23:19

system32.rar\nwizqjsj.exe;D:\Documents and Settings\dell\桌面\system32.rar;Trojan.DownLoader.21791;;
system32.rar\qjsj100.dll;D:\Documents and Settings\dell\桌面\system32.rar;Trojan.DownLoader.21786;;
system32.rar;D:\Documents and Settings\dell\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-5-2 16:28:30

咖啡报木马

显示全部楼层 · 发表于 2007-5-2 16:33:14

HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ NWIZQJSJ C:\WINDOWS\SYSTEM32\NWIZQJSJ.EXE

显示全部楼层 · 发表于 2007-5-2 16:34:59

Starting the file scan:

Begin scan in 'F:\样本\system32.rar'
F:\样本\system32.rar
  [0] Archive type: RAR
  --> nwizqjsj.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> qjsj100.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-2 16:36:31

卡7启发一个

显示全部楼层 · 发表于 2007-5-2 16:38:53

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-2
Start time: 2007-5-2 16:38
Engine(s): KAV engine (AVK 17.4378), BD-Engine (BD 17.2635)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: nwizqjsj.exe
In archive: C:\Documents and Settings\Administrator\桌面\system32.rar
Status: Suspected virus
Virus: Generic.Malware.SBg.94E23D1B (BD-Engine)
Object: system32.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Suspected virus
Virus: Generic.Malware.SBg.94E23D1B (BD-Engine)
Analysis complete: 2007-5-2 16:38
1 files checked
0 infected files detected
1 suspected files detected

显示全部楼层 · 发表于 2007-5-2 18:28:22

继续拦截

[病毒样本] 我的杀毒软件都被这个干掉了

本帖子中包含更多资源

本帖子中包含更多资源

直接报

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源