5/31 10:00 两个，过卡巴扫描。（下午卡巴均入库可杀）

显示全部楼层 · 发表于 2007-5-31 12:04:05

嫉妒卡巴猥琐的速度
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\6080_158158.zip'
C:\Documents and Settings\morgan\My Documents\
  6080_158158.zip
[0] Archive type: ZIP
--> 6080_158158.exe
      [1] Archive type: RAR SFX (self extracting)
      --> dodolook246.exe
      --> bind_50380.exe
         [DETECTION] Contains suspicious code HEUR/Malware
         [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\bind_50287.zip'
C:\Documents and Settings\morgan\My Documents\
  bind_50287.zip
[0] Archive type: ZIP
--> bind_50287.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-31 12:30:24

kill

显示全部楼层 · 发表于 2007-5-31 13:23:49

deleted: adware not-a-virus:AdWare.Win32.Cinmus.w File: C:\Documents and Settings\Owner\×ÀÃæ\6080_158158.zip/6080_158158.exe//data.rar/dodolook246.exe//data0003//data0003
deleted: adware not-a-virus:AdWare.Win32.Cinmus.w File: C:\Documents and Settings\Owner\×ÀÃæ\6080_158158.zip/6080_158158.exe//data.rar/dodolook246.exe//data0003//data0004
deleted: Trojan program Trojan-Downloader.Win32.QQHelper.wn File: C:\Documents and Settings\Owner\×ÀÃæ\6080_158158.zip/6080_158158.exe//data.rar/bind_50380.exe
deleted: Trojan program Trojan-Downloader.Win32.QQHelper.vx File: C:\Documents and Settings\Owner\×ÀÃæ\bind_50287.zip/bind_50287.exe

显示全部楼层 · 发表于 2007-5-31 13:55:15

为什么我的KIS7都给拦住了？

显示全部楼层 · 发表于 2007-5-31 14:41:33

Virus: not-a-virus:AdWare.Win32.Cinmus.w (2x), Trojan-Downloader.Win32.QQHelper.wn

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-Downloader.Win32.QQHelper.vx

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-5-31 15:03:15

我的KIS6.0.621的2個都下載不了。。直接被干了

显示全部楼层 · 发表于 2007-5-31 15:15:51

HEUR/Malware的启发还是挺准的！

显示全部楼层 · 发表于 2007-5-31 15:39:23

----------
[凝逸反毒] (http://hi.baidu.com/503165656)

[凝逸.扫描病毒引擎-日志] 2007.5.31 15:38:48

文件:F:\070601\Trojan-Downloader.Win32.QQHelper.wn\6080_158158\dodolook246\$PLUGINSDIR\System.dll | 感染:木马 [92>2007_150748_0103.axx]3
操作:删除文件

扫描完成|病毒:1 文件:6|耗时:30023
----------

显示全部楼层 · 发表于 2007-5-31 21:09:15

驅逐艦都掛~~

显示全部楼层 · 发表于 2007-6-1 19:20:58

第一个报
第二个上报给ESET

[病毒样本] 5/31 10:00 两个，过卡巴扫描。（下午卡巴均入库可杀）

本帖子中包含更多资源

本帖子中包含更多资源