10个

绅博周幸

扫

mofunzone

妈妈咪呀。。
用得着天天nsanti么？
我们免杀的智慧是无穷的

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\新建文件夹.rar'
C:\Documents and Settings\Administrator\My Documents\
  新建文件夹.rar
    [0] Archive type: RAR
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.EXE
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [1] Archive type: RAR SFX (self extracting)
        --> wpcap.dll
        --> systemm.exe
            [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh Backdoor server programs
            [WARNING]   Infected files in archives cannot be repaired!
        --> drivers\npf.sys
        --> Packet.dll
        --> WanPacket.dll
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 10.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年6月26日  00:05
Used time: 00:11 min

The scan has been done completely.

      0 Scanning directories
     16 Files were scanned
     11 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      2 Archives were scanned
     12 Warnings
      0 Notes
      0 Hidden objects were found

风野胤

果然不出所料
还好我没下

绅博周幸

原帖由 mofunzone 于 2007-6-26 15:00 发表
妈妈咪呀。。
用得着天天nsanti么？
我们免杀的智慧是无穷的

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\新建文件夹.rar'
C:\Documents and Sett ...

只要XXX不解决这个问题的话，就会有无数这种样本冒出来，而且现在用NSANTI已经很普遍了

The EQs

LS也就会NSANTI了。。。。

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.su        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/4.exe//PE_Patch.NSAnti//NSAnti
detected: Trojan program Trojan-Downloader.Win32.Delf.bga        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/7.exe//PE_Patch.NSAnti//NSAnti
detected: Trojan program Backdoor.Win32.Agent.alh        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/8.EXE/systemm.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Small.eor        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/9.exe//PE_Patch.NSAnti//NSAnti
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/10.exe//PE_Patch.NSAnti//NSAnti
detected: Trojan program Backdoor.Win32.Hupigon.eko        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/1.exe//PE_Patch.NSAnti//NSAnti
detected: Trojan program Trojan-PSW.Win32.OnLineGames.su        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/2.exe//PE_Patch.NSAnti//NSAnti
detected: Trojan program Trojan-PSW.Win32.OnLineGames.su        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/3.exe//PE_Patch.NSAnti//NSAnti

allenhippo

原帖由 EQ2 于 2007-6-26 15:03 发表
LS也就会NSANTI了。。。。

这个网上很多的，带arp攻击的大全套。好多网页上挂一个下载者，下得就是这些1-10

来看看Ikarus乱报得能力

IKARUS - T3SCAN V1.25 (WIN32)
         T3 V1.01.08
         Copyright (c) 2003 - 2007 by IKARUS Software.
         Written by Richard Schmoegner.
         All rights reserved.
Signature-database from 26.6.2007 04:15:07 (Build: 69122)

G:\virtualshare\temp\2.rar:\4.exe - Signature 'Backdoor.Win32.Hupigon.RS' found

G:\virtualshare\temp\2.rar:\5.exe - Signature 'Backdoor.Win32.Hupigon.RS' found

G:\virtualshare\temp\2.rar:\6.exe - Signature 'Backdoor.Win32.Hupigon.RS' found

G:\virtualshare\temp\2.rar:\7.exe - Signature 'Backdoor.Win32.Hupigon.RS' found

G:\virtualshare\temp\2.rar:\8.EXE\systemm.exe - Signature 'Backdoor.Win32.Aimbot.AE' found


G:\virtualshare\temp\2.rar:\8.EXE - Signature 'Worm.Win32.Viking.ex' found

G:\virtualshare\temp\2.rar:\9.exe - Signature 'Backdoor.Win32.Hupigon.RS' found

G:\virtualshare\temp\2.rar:\10.exe - Signature 'Backdoor.Win32.Hupigon.RS' found

G:\virtualshare\temp\2.rar:\1.exe - Suspect code-parts found (Level: 90)

G:\virtualshare\temp\2.rar:\2.exe - Signature 'Backdoor.Win32.Hupigon.RS' found

G:\virtualshare\temp\2.rar:\3.exe - Signature 'Backdoor.Win32.Hupigon.RS' found


16 Files scanned
   (1 Archiv with 15 files)
10 Signatures found
1 Suspect code-part found
Used time: 0:03.312

[ 本帖最后由 allenhippo 于 2007-6-26 15:21 编辑 ]

Giggs

居然报鸽子

duandxxi

金山毒霸报

freeboyoua

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.su        URL: http://bbs.kafan.cn/attachment.p ... atch.NSAnti//NSAnti