XXXXXXXXXX

显示全部楼层 · 发表于 2007-5-8 20:16:57

XXXXXXXXXXXXX

显示全部楼层 · 发表于 2007-5-8 20:19:39

KIS621没反应

显示全部楼层 · 发表于 2007-5-8 20:20:22

为解压缩扫描，BD10结果是0。。。

显示全部楼层 · 发表于 2007-5-8 20:25:17

未解压红伞5个

显示全部楼层 · 发表于 2007-5-8 20:36:21

貌似都是流氓软件，瑞星主程序不杀流氓软件的

显示全部楼层 · 发表于 2007-5-8 21:07:13

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\xxxxxx'
C:\Documents and Settings\Administrator\桌面\xxxxxx\xxxxxx\$R0
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '46647617.qua'!
C:\Documents and Settings\Administrator\桌面\xxxxxx\xxxxxx\AutoLive.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/CoolBar
   [INFO]    A backup was created as '46b47630.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\xxxxxx\xxxxxx\cnsminkp.vxd
   [DETECTION] Contains signature of the application APPL/Inst.Yok.6
   [INFO]    A backup was created as '46b3762a.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\xxxxxx\xxxxxx\cnsminkp2k.sys
   [DETECTION] Is the Trojan horse TR/Agent.38400
   [INFO]    A backup was created as '472db947.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\xxxxxx\xxxxxx\cnsminkpxp.sys
   [DETECTION] Is the Trojan horse TR/Agent.38400
   [INFO]    A backup was created as '46b37624.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-8 21:39:54

nod32不杀流氓

显示全部楼层 · 发表于 2007-5-8 22:23:44

显示全部楼层 · 发表于 2007-5-8 23:17:25

Hello,

$R0,
$R0----,
$R00,
AutoLive.dll,
cns1u.cpr,
cnsminkp.vxd,
cnsminkp2k.sys,
cnsminkpxp.sys,
InstallOptions.dll,
yassist4[1].exe_,
yiebwlist.dat,
yierepairn.dat---

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: xxxxxx.zip

[病毒样本] XXXXXXXXXX

本帖子中包含更多资源

本帖子中包含更多资源