6个[MD5: 0686F4 2E9B1E CBE1DD E14CA8 CCBDCE 782A03]

allenhippo

启发啊启发

wangjay1980

detected: virus Downloader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/index[1].exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/x1[1].exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yn        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/x2[1].exe//TIMHOST.DLL
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/x4[1].exe//PE_Patch//UPack

hj5abc

启发来也..

Scan performed at: 2007-6-28 20:09:35
Scanning Log
NOD32 version 2361 (20070628) NT
Command line: F:\virus.rar
Operating memory - is OK

Date: 28.6.2007  Time: 20:09:38
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\virus.rar
F:\virus.rar ?RAR ?index[1].exe - probably unknown NewHeur_PE virus [7]
F:\virus.rar ?RAR ?x1[1].exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\virus.rar ?RAR ?x2[1].exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\virus.rar ?RAR ?x3[1].exe - a variant of Win32/Agent.NIK trojan
F:\virus.rar ?RAR ?x4[1].exe - a variant of Win32/PSW.OnLineGames.RC trojan
F:\virus.rar ?RAR ?x5[1].exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 7
Number of threats found: 6
Number of files cleaned: 1
Time of completion: 20:09:40 Total scanning time: 2 sec (00:00:02)

hj5abc

原帖由 wangjay1980 于 2007-6-28 20:12 发表
detected: virus Downloader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/index[1].exe
detected: virus Invader (modification)        File: C:\Documents and Set ...

卡巴的脱壳和启发真是绝配..

aerbeisi

还有主防，小红伞下个版本也要有主防了同时会降低误报。

taihuxian

Virus: Win32:Onlinegames-ACD [Trj], Win32:Agent-HHP [Trj], Win32:Onlinegames-ACS [Trj], Win32:Delf-EQW [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\virus.rar'
F:\病毒样本\virus.rar
  [0] Archive type: RAR
  --> index[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> x1[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> x2[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> x4[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
  --> x5[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!

woai_jolin

解压狂报
2007/6/28 20:42:31        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:31        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:30        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:29        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:29        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:29        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:28        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:28        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:27        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:26        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:26        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:25        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:25        eAmon        file        D:\病毒上报\X5[1].EXE        probably unknown NewHeur_PE virus        unable to clean        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/28 20:42:24        eAmon        file        D:\病毒上报\X5[1].EXE        probably unknown NewHeur_PE virus        unable to clean        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/28 20:42:23        eAmon        file        D:\病毒上报\x5[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/28 20:42:23        eAmon        file        D:\病毒上报\x4[1].exe        a variant of Win32/PSW.OnLineGames.RC trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/28 20:42:22        eAmon        file        D:\病毒上报\x3[1].exe        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/28 20:42:21        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:21        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:20        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:20        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:20        eAmon        file        D:\病毒上报\x2[1].exe        a variant of Win32/PSW.OnLineGames.YA trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/28 20:42:19        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred during an attempt to access the file by the application: C:\Windows\Explorer.EXE.
2007/6/28 20:42:19        eAmon        file        D:\病毒上报\X1[1].EXE        a variant of Win32/PSW.OnLineGames.YA trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/28 20:42:17        eAmon        file        D:\病毒上报\index[1].exe        probably unknown NewHeur_PE virus        unable to clean                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/28 20:42:17        eAmon        file        D:\病毒上报\INDEX[1].EXE        probably unknown NewHeur_PE virus        unable to clean        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/28 20:42:17        eAmon        file        D:\病毒上报\INDEX[1].EXE        probably unknown NewHeur_PE virus        unable to clean        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

[ 本帖最后由 woai_jolin 于 2007-6-28 20:54 编辑 ]

yashoo

小邪邪

扫一下