這種我重過一次，被我通訊錄的好友清單所害。不過不是開啟中毒，而是預覽也遭殃。
引用:
|
作者leewayne
最近一年以來，
敝人一共收到這種信不下十封，
最疑惑的是寄信人的IP都是"熟人"，
以致於第一次收到這類信時就中毒，而且解不掉..........
|
我認為應該是有人不幸中鏢，透過通訊錄的好友清單發送的。因此當收信者看到信件時，通常不會有太大的防備
引用:
|
作者水舞風影
剛剛試過F-secure 6.03 直接scan壓縮檔是有掃到的，可能有自動更新了吧~
 |
最近我的好像有更新過。下載後手動掃描也可以發現：
Scanning Report
07 April 2007 19:16:02 - 19:16:02
Computer name: IORI-B46D07E295
Scanning type: Scan target for viruses
Target: C:\Documents and Settings\IORI YAGAMI\®à±\virus.rar
Result:
1 malware found
Trojan-PSW.Win32.Magania.oh (virus)
* C:\Documents and Settings\IORI YAGAMI\®à±\virus.rar\[Scanned by Cloudmark] »′ä²Ä¤@¬ü¤k§õ¹ÅªYªº»r·Ó{ªþ¹Ï}.eml\[From =?big5?q?=AFq=B9=FC=20=A7=F5?= ][Subject:[Scanned by Cloudmark] =?big5?q?=AD=BB=B4=E4=B2=C4=A4@=AC=FC=A4k=A7=F5=B9=C5=AAY=AA=BA=BBr=B7=D3?=
=?big5?q?{=AA=FE=B9=CF}?=]¹ÅªY»r·Ó.com
Statistics
Files:
* Scanned: 10
* System: 0
* Not scanned: 0
Result:
* Viruses: 1
* Spyware: 0
* Suspected: 0
Actions:
* Disinfected: 0
* Renamed: 0
* Deleted: 0
* Quarantined: 0
* Failed: 0
Boot Sectors:
* Scanned: 0
* Infected: 0
* Suspected: 0
* Disinfected: 0
Options
Definitions version:
* Viruses: 2007-04-06_02
* Spyware: 2007-04-04_05
Scanning Engines:
* F-Secure AVP: 6.00.169, 2007-04-06
* F-Secure Libra: 2.03.11, 2007-04-04
* F-Secure Orion: 1.02.37, 2007-04-06
* F-Secure Draco: 1.00.35, 2007-04-02
Scanning options:
* Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
* Scan inside archives
Actions:
* Viruses: Ask after scan
* Spyware: Ask after scan
Copyright © 1998-2005 Product support | Send virus sample to F-Secure
F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name. This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability.