AVK2006挂[4595B3]

显示全部楼层 · 发表于 2007-6-23 16:03:59

Scan performed at: 2007-6-23 16:08:40
Scanning Log
NOD32 version 2347 (20070623) NT
Command line: C:\Documents and Settings\EQ2\桌面\muma.rar
Operating memory - is OK

Date: 23.6.2007 Time: 16:08:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\muma.rar
C:\Documents and Settings\EQ2\桌面\muma.rar ?RAR ?muma.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:08:46 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-6-23 16:07:36

一运行就CPU 100%，加壳加太猛了吧

显示全部楼层 · 发表于 2007-6-23 16:15:42

運行muma.exe，發現下列行為，被EQ-Secure RC2攔截！

2007-06-23 16:18:51 运行应用程序操作:允许
进程路径:C:\windows\Explorer.EXE
文件路径:D:\桌面\virus\4595B3muma\muma.exe
规则:应用程序规则->系統程序->%windir%\Explorer.EXE

2007-06-23 16:18:52 创建文件操作:阻止
进程路径:D:\桌面\virus\4595B3muma\muma.exe
文件路径:C:\Program Files\Common Files\Microsoft Shared\MSINFO\MSIOFF9.MOD
规则:所有程序规则->保護安全軟體->C:\Program Files\*

1.他會在C:\Program Files\Common Files\Microsoft Shared\MSINFO\產生
MSIOFF9.MOD

显示全部楼层 · 发表于 2007-6-23 16:16:47

难道我cpu性能不够

显示全部楼层 · 发表于 2007-6-23 16:17:59

费尔报壳

显示全部楼层 · 发表于 2007-6-23 16:18:21

应该不是什么猛壳，红伞没报壳

显示全部楼层 · 发表于 2007-6-23 16:18:47

死了？卡巴没检测出壳，不知道是什么

detected: Trojan program Trojan-PSW.Win32.QQPass.fq URL: http://bbs.kafan.cn/attachment.php?aid=91828//muma.exe

[ 本帖最后由 wangjay1980 于 2007-6-23 22:30 编辑 ]

显示全部楼层 · 发表于 2007-6-23 16:19:58

费尔报壳

显示全部楼层 · 发表于 2007-6-23 16:21:29

Begin scan in 'D:\muma.rar'
D:\muma.rar
  [0] Archive type: RAR
  --> muma.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQPass.FQ.18
   [WARNING] The file was ignored!

End of the scan: 2007年6月23日  16:25
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes
   0 Hidden objects were found

[病毒样本] AVK2006挂[4595B3]

本帖子中包含更多资源

本帖子中包含更多资源

回复 #5 allenhippo 的帖子

回复 #7 promised 的帖子

回复 #9 EQ2 的帖子

浏览过的版块