卡7过了

显示全部楼层 · 发表于 2007-5-11 00:22:04

1321313

显示全部楼层 · 发表于 2007-5-11 00:26:22

google了下貌似是麦英变种

显示全部楼层 · 发表于 2007-5-11 00:27:00

Starting the file scan:

Begin scan in 'D:\Documents and Settings\dell\桌面\kllo.rar'
D:\Documents and Settings\dell\桌面\kllo.rar
  [0] Archive type: RAR
  --> kllo.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-11 00:27:40

Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-5-11 0:27:18,Heuri.ERNM,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\kllo.rar>>kllo.exe>>emb-1.exe,Manual scan

显示全部楼层 · 发表于 2007-5-11 00:28:54

麦咖啡也过了，

。

显示全部楼层 · 发表于 2007-5-11 00:30:48

程序:
C:\DOCUMENTS AND SETTINGS\NICE\桌面\KLLO\KLLO.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\NICE\APPLICATION DATA\SANDBOX\DEFAULTBOX\DEVICE\HARDDISKVOLUME1\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WEB FOLDERS\MSOSVEXT.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-5-11 00:40:32

显示全部楼层 · 发表于 2007-5-11 06:22:58

不可能!!!

我刚下载好,它就报毒了!!!

显示全部楼层 · 发表于 2007-5-11 06:42:01

Scan performed at: 2007-5-11 6:42:02
Scanning Log
NOD32 version 2256 (20070510) NT
Command line: C:\Documents and Settings\EQ2\桌面\kllo.rar
Operating memory - is OK

Date: 11.5.2007 Time: 06:42:07
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\kllo.rar
C:\Documents and Settings\EQ2\桌面\kllo.rar ?RAR ?kllo.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 06:42:08 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-5-11 06:42:25

[病毒样本] 卡7过了

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

BD

本帖子中包含更多资源