又一个过卡7的

显示全部楼层 · 发表于 2007-5-11 00:29:31

看来卡7启发扫描还要加强啊

显示全部楼层 · 发表于 2007-5-11 00:30:13

木马名称:Trojan-PSW.Win32.QQShou.avf

程序:
C:\DOCUMENTS AND SETTINGS\NICE\桌面\BOOT\BOOT.COM
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-5-11 00:31:31

Filseclab
Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-5-11 0:30:39,TrojanPSW.QQPass.cor.jmap,木马,BEYOND,C:\Documents and Settings\BEYOND\桌面\boot.rar>>boot.com,Manual scan

显示全部楼层 · 发表于 2007-5-11 00:35:12

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-9
Start time: 2007-5-11 0:34
Engine(s): KAV engine (AVK 17.5133), BD-Engine (BD 17.4713)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: boot.com
Path: C:\Documents and Settings\Administrator\桌面\boot
Status: Move file into quarantine
Virus: BehavesLike:Trojan.ShellHook (BD-Engine)
Analysis complete: 2007-5-11 0:34
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-11 00:45:45

显示全部楼层 · 发表于 2007-5-11 00:49:42

蜘蛛杀了

显示全部楼层 · 发表于 2007-5-11 01:01:39

原帖由 jlennon 于 2007-5-11 00:35 发表
Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-9
Start time: 2007-5-11 0:34
Engine(s): KAV engine (AVK 17.5133), BD-Engine (BD 17.4713)
Heuristic: On
Archives: On
...

你的AVK什么版本哦，07还是06，安装版还是精简版AND绿色的
以前绅博每天讨论最多的就是假死问题，06版的假死，各个语言版本都有这样的情况，不过在英文操作系统好象很少，在中文操作系统下出现频率太高鸟，别说用，看着就怕。
AVK DIY引擎很爽哦，不过我不用

麻烦，DIY病毒库也麻烦

显示全部楼层 · 发表于 2007-5-11 01:30:40

杀了生成物
5楼的，你看看你的注册表里有没有HKLM\SOFTWARE\Classes\CLSID\{B8A170A8-7AD3-4678-B2FE-F2D7381CC1B5}\InProcServer32\这个值？

显示全部楼层 · 发表于 2007-5-11 02:45:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\boot.rar'
C:\Documents and Settings\morgan\My Documents\
  boot.rar
[0] Archive type: RAR
--> boot.com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-11 06:46:22

Scan performed at: 2007-5-11 6:46:23
Scanning Log
NOD32 version 2256 (20070510) NT
Command line: C:\Documents and Settings\EQ2\桌面\boot.rar
Operating memory - is OK

Date: 11.5.2007 Time: 06:46:28
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\boot.rar
C:\Documents and Settings\EQ2\桌面\boot.rar ?RAR ?boot.com - probably a variant of Win32/PSW.QQShou trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 06:46:29 Total scanning time: 1 sec (00:00:01)

[病毒样本] 又一个过卡7的

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源