21个卡巴免杀，1个下载者，10个木马外带10个释放的dll

hj5abc

probably a variant of Win32/Pacex.Gen virus
'Packed.Win32.NSAnti.p'
MalwareScope.Worm.Viking.3

都是清一色的,到底是样本的问题,还是.. .
看来有人要发清一色的Crypt.NSPM.Gen了.

欠妳緈諨

AVAST全灭

wangjay1980

21个
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\c0nime.exe
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\crasos.exe
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\exp10rer.exe
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\explorei.exe
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\Gjzo0.dll
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\iexp10re.exe
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\iexp1ore.exe
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\iexpl0re.exe
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\iexplorer.exe
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\LgSy0.dll
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\LgSy0r.dll
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\LgSy1.dll
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\Msxo0.dll
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\qjzo0.dll
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\Rav.exe
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\Ravs0.dll
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\servet.exe
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\tlzo0.dll
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\txzo0.dll
detected: virus Heur.Invader (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\winlog0n.exe
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\zxzo0.dll

蓝色牛仔裤

蜘蛛最强了，清一色的 decompression error 。。。

The EQs

费尔说了。。。。并非报壳

allenhippo

那就和vba一样，认成viking了

XinDOS

kb没报

hj5abc

原帖由 allenhippo 于 2007-6-30 21:57 发表
那就和vba一样，认成viking了

很多次viking 都会同时出现 Pacex.Gen ,MalwareScope.viking.3,tibs-ADO和Crypt.NSPM.Gen的名称.

hj5abc

Avast够强,还报出UPX.

woai_jolin

按得我手都麻咯
2007/6/30 22:36:27        Scanning Log
2007/6/30 22:36:27        Version of virus signature database: 2365 (20070630)
2007/6/30 22:36:27        Date: 30.6.2007  Time: 22:36:27
2007/6/30 22:36:27        Scanned disks, folders and files: D:\病毒上报\
2007/6/30 22:36:29        D:\病毒上报\c0nime.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:30        D:\病毒上报\crasos.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:30        D:\病毒上报\exp10rer.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:31        D:\病毒上报\explorei.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:32        D:\病毒上报\Gjzo0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:32        D:\病毒上报\iexp10re.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:33        D:\病毒上报\iexp1ore.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:33        D:\病毒上报\iexpl0re.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:34        D:\病毒上报\iexplorer.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:34        D:\病毒上报\LgSy0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:35        D:\病毒上报\LgSy0r.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:35        D:\病毒上报\LgSy1.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:36        D:\病毒上报\Msxo0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:36        D:\病毒上报\qjzo0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:37        D:\病毒上报\Rav.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:37        D:\病毒上报\Ravs0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:37        D:\病毒上报\servet.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:38        D:\病毒上报\tlzo0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:38        D:\病毒上报\txzo0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:38        D:\病毒上报\winlog0n.exe - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:39        D:\病毒上报\zxzo0.dll - probably a variant of Win32/Pacex.Gen virus - deleted - quarantined
2007/6/30 22:36:39        Number of scanned files: 21
2007/6/30 22:36:39        Number of threats found: 21
2007/6/30 22:36:39        Time of completion: 22:36:39  Total scanning time: 12 sec (00:00:12)