发3个过小红伞的

显示全部楼层 · 发表于 2007-5-11 11:43:06

红伞潇洒的飘过了

显示全部楼层 · 发表于 2007-5-11 11:47:46

2007-5-11 11:47:59 Safe'n'Sec 扫描报告

2007-5-11 11:47:59 扫描开始时间: 2007-5-11 11:47:59

2007-5-11 11:47:59 恶意软件处理:
2007-5-11 11:47:59 扫描级别: 完全

2007-5-11 11:48:05 D:\新建文件夹\328.exe 可疑跳过:
2007-5-11 11:48:05 D:\新建文件夹\VFP6RUN.EXE 被感染 Win32.Mamut.A 删除
2007-5-11 11:48:05 扫描区域:

2007-5-11 11:48:05 D:\新建文件夹
2007-5-11 11:48:05
2007-5-11 11:48:05 已扫描对象: 3
2007-5-11 11:48:05 已发现恶意对象: 1
2007-5-11 11:48:05 已删除恶意对象: 1

2007-5-11 11:48:05 扫描完成时间: 2007-5-11 11:48:05

显示全部楼层 · 发表于 2007-5-11 11:48:05

detected: Trojan program Trojan.Win32.Delf.abj File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/328.exe
detected: Trojan program Trojan-Downloader.Win32.Agent.bdn File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/Updaterun.exe
detected: virus Virus.Win32.Downloader.e File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/VFP6RUN.EXE

显示全部楼层 · 发表于 2007-5-11 11:48:39

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-6
Start time: 2007-5-11 11:48
Engine(s): KAV engine (AVK 17.4461), BD-Engine (BD 17.3197)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 328.exe
In archive: C:\Documents and Settings\Administrator\桌面\3.zip
Status: Virus detected
Virus: Trojan.Win32.Delf.abj (KAV engine), BehavesLike:Win32.Malware (BD-Engine)
Object: Updaterun.exe
In archive: C:\Documents and Settings\Administrator\桌面\3.zip
Status: Virus detected
Virus: Trojan-Downloader.Win32.Agent.bdn (KAV engine)
Object: VFP6RUN.EXE
In archive: C:\Documents and Settings\Administrator\桌面\3.zip
Status: Virus detected
Virus: Virus.Win32.Downloader.e (KAV engine), Win32.Mamut.A (BD-Engine)
Object: 3.zip
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: Trojan.Win32.Delf.abj, Trojan-Downloader.Win32.Agent.bdn, Virus.Win32.Downloader.e (KAV engine), BehavesLike:Win32.Malware, Win32.Mamut.A (BD-Engine)
Analysis complete: 2007-5-11 11:48
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-11 11:51:29

AVAST不报，上报！

显示全部楼层 · 发表于 2007-5-11 11:51:55

上报去

显示全部楼层 · 发表于 2007-5-11 11:56:42

已删除: 木马程序 Trojan.Win32.Delf.abj 文件: C:\Documents and Settings\Administrator\桌面\3.zip/328.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.bdn 文件: C:\Documents and Settings\Administrator\桌面\3.zip/Updaterun.exe
已删除: 病毒 Virus.Win32.Downloader.e 文件: C:\Documents and Settings\Administrator\桌面\3.zip/VFP6RUN.EXE
KIS621杀，但是奇怪的是过了费尔

显示全部楼层 · 发表于 2007-5-11 12:44:36

C:\Documents and Settings\sui\桌面\3.zip=>328.exe 可疑: BehavesLike:Win32.Malware
C:\Documents and Settings\sui\桌面\3.zip=>328.exe 杀毒失败
C:\Documents and Settings\sui\桌面\3.zip=>328.exe 删除
C:\Documents and Settings\sui\桌面\3.zip Archive repacking successfully completed (actions successfully applied)
C:\Documents and Settings\sui\桌面\3.zip=>VFP6RUN.EXE 感染: Win32.Mamut.A
C:\Documents and Settings\sui\桌面\3.zip=>VFP6RUN.EXE 杀毒失败
C:\Documents and Settings\sui\桌面\3.zip=>VFP6RUN.EXE 删除
C:\Documents and Settings\sui\桌面\3.zip Archive repacking successfully completed (actions successfully applied)

bd报2个……其中一个可疑@@

显示全部楼层 · 发表于 2007-5-11 12:53:07

Scan performed at: 2007-5-11 12:53:16
Scanning Log
NOD32 version 2256 (20070510) NT
Command line: C:\Documents and Settings\EQ2\桌面\3.zip
Operating memory - is OK

Date: 11.5.2007 Time: 12:53:21
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\3.zip
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?328.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?Updaterun.exe - a variant of Win32/Adware.Toolbar.Baidu application
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 12:53:21 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-5-11 12:54:33

费尔全杀

[病毒样本] 发3个过小红伞的

本帖子中包含更多资源