2个【891cb9 358ee5】

显示全部楼层 · 发表于 2007-6-21 23:00:19

AVAST继续飘

显示全部楼层 · 发表于 2007-6-21 23:01:56

detected: virus Virus.Win32.AutoRun.br File: C:\Documents and Settings\Owner\×ÀÃæ\½âÑ¹.rar/n=RavMon.exeinatsdfs.exe//UPX
detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\½âÑ¹.rar/afx.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-6-21 23:03:52

NOD32还是不杀autorun.

Scanned disks, folders and files: F:\解压.rar
F:\解压.rar ?RAR ?afx.exe - probably unknown NewHeur_PE virus [7]

显示全部楼层 · 发表于 2007-6-21 23:50:25

解压.rar
  [0] Archive type: RAR
  --> n=RavMon.exeinatsdfs.exe
   [DETECTION] Is the Trojan horse TR/Agent.358ee5
  --> afx.exe
   [DETECTION] Contains suspicious code HEUR/Malware

显示全部楼层 · 发表于 2007-6-21 23:56:18

File Name          Findings                      Detection                   Type       Extra
--------------------|------------------------------|----------------------------|------------|-----
afx.exe          |heuristic detection          |new malware.n             |Trojan    |no
ravmon.exeinatsdfs|inconclusive                |inconclusive                |          |no

[ 本帖最后由 yashoo 于 2007-6-22 00:20 编辑 ]

显示全部楼层 · 发表于 2007-6-22 00:54:04

病毒: Virus.Win32.AutoRun.br
文件: 解压[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\LBHOXL0R
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-22 03:42:56

deleted: virus Virus.Win32.AutoRun.br File: C:\Users\KAV-Longhorn\Documents\Downloads\Compressed\½âÑ¹.rar/n=RavMon.exeinatsdfs.exe//UPX
deleted: Trojan program Trojan-Spy.Win32.Agent.rk File: C:\Users\KAV-Longhorn\Documents\Downloads\Compressed\½âÑ¹.rar/afx.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-6-22 03:53:03

avg AV只报了一个，sfx没报..

显示全部楼层 · 发表于 2007-6-22 06:42:15

Virus: Virus.Win32.AutoRun.br, Trojan-Spy.Win32.Agent.rk

Virus found while downloading Web content.

Address: bbs.kafan.cn

[病毒样本] 2个【891cb9 358ee5】

本帖子中包含更多资源