NOD和AVG牺牲

solcroft

Oceanzd

SSM提示exe试图打开E盘

同时在%WinDir%\System32创建和文件夹里同样大小，具有隐藏属性的flashplay.dll

试图用Rundll32启动，但是失败

solcroft

其实要过卡巴是件挺麻烦的事

solcroft

原帖由 Oceanzd 于 2007-5-3 08:33 发表
63067
SSM提示exe试图打开E盘

同时在%WinDir%\System32创建和文件夹里同样大小，具有隐藏属性的flashplay.dll

试图用Rundll32启动，但是失败

你的SSM有没有监控HKR\CLSID\*\Inprocserver32这个值？才发现到这个鬼咚咚原来蛮阴险的

kfcnknight

AVGAS用来杀木马和流氓比较有用

wangjay1980

现在杀

sexing

已经删除: 病毒 Virus.Win32.BHO.a        文件: C:\Documents and Settings\Owner\桌面\屁.rar/flashplay.dll

已经删除: 病毒 Virus.Win32.BHO.a        文件: C:\Documents and Settings\Owner\桌面\屁.rar/readme.txt.exe

aribeth199

KAV6两个

蓝色牛仔裤

下载后的原文件名居然过了AVK...
改名就报了...

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-3
Start time: 2007-5-3 20:47
Engine(s): KAV engine (AVK 17.4397), BD-Engine (BD 17.3197)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: flashplay.dll
        In archive: C:\Documents and Settings\Administrator\桌面\屁.rar
        Status: Virus detected
        Virus: Virus.Win32.BHO.a (KAV engine), Trojan.Downloader.Delf.NNM (BD-Engine)
Object: readme.txt.exe
        In archive: C:\Documents and Settings\Administrator\桌面\屁.rar
        Status: Virus detected
        Virus: Virus.Win32.BHO.a (KAV engine), Trojan.Downloader.Delf.NNN (BD-Engine)
Object: 屁.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus, file deleted
        Virus: Virus.Win32.BHO.a (2x) (KAV engine), Trojan.Downloader.Delf.NNM, Trojan.Downloader.Delf.NNN (BD-Engine)
Analysis complete: 2007-5-3 20:47
    1 files checked
    1 infected files detected
    0 suspected files detected

Anycall-D908

原帖由 wangjay1980 于 2007-5-3 09:26 发表
现在杀

      是不是更新了啦?都过一天了,卡巴更新速度都快得变态的.