一只马儿4af52ff

显示全部楼层 · 发表于 2007-6-20 22:35:02

这个是木马？
汗........

显示全部楼层 · 发表于 2007-6-20 22:35:45

Scan performed at: 2007-6-20 22:39:53
Scanning Log
NOD32 version 2341 (20070620) NT
Command line: C:\Documents and Settings\EQ2\桌面\45.rar
Operating memory - is OK

Date: 20.6.2007 Time: 22:39:57
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\45.rar
C:\Documents and Settings\EQ2\桌面\45.rar ?RAR ?keygen.exe - Win32/Spy.Banker trojan - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 22:39:57 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-6-20 22:36:25

咖啡也杀：PWS-Banker.gen.ad (特洛伊)

显示全部楼层 · 发表于 2007-6-20 22:37:07

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Jason\My Documents\Virus\45.rar'
C:\Documents and Settings\Jason\My Documents\Virus\45.rar
  [0] Archive type: RAR
  --> keygen.exe
   [DETECTION] Is the Trojan horse TR/PSW.Banker.BA
   [INFO]    The file was renamed to '45.rar.VIR'!

显示全部楼层 · 发表于 2007-6-20 22:38:06

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\45.rar'
C:\Documents and Settings\Administrator\桌面\45.rar
  [0] Archive type: RAR
  --> keygen.exe
   [DETECTION] Is the Trojan horse TR/PSW.Banker.BA
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-20 22:39:57

這是註冊機

显示全部楼层 · 发表于 2007-6-20 22:41:01

2007-6-20 JAY22:45:57 File: C:\Documents and Settings\Owner\×ÀÃæ\45.rar/keygen.exe//PE_Patch.PECompact//PecBundle//PECompact ok scanned

这种东西AVG喜欢报

C:\Documents and Settings\Owner\桌面\45.zip/keygen.exe -> Logger.Banker.ba : No action taken.

[ 本帖最后由 wangjay1980 于 2007-6-20 23:03 编辑 ]

显示全部楼层 · 发表于 2007-6-20 22:43:29

正常文件,报的全是误报

显示全部楼层 · 发表于 2007-6-20 22:45:02

去上报给卡巴看看。。。。

显示全部楼层 · 发表于 2007-6-20 22:45:54

有害策略嘛

[病毒样本] 一只马儿4af52ff

本帖子中包含更多资源

回复 #7 wangjay1980 的帖子

本帖子中包含更多资源