大清早的来几个[MD5: A69F3C 6E13D1 CCFAD8 7DB347]

显示全部楼层 · 发表于 2007-7-2 08:09:06

Starting the file scan:

Begin scan in 'F:\病毒样本\virus.rar'
F:\病毒样本\virus.rar
  [0] Archive type: RAR
  --> 123.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 1234.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 3324.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> jianghu.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-2 08:09:14

detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/123.exe
detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/1234.exe
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/3324.exe
detected: virus Packed.Win32.PePatch.dk (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/jianghu.exe//NSPack//PE_Patch.Stolen

显示全部楼层 · 发表于 2007-7-2 08:25:29

2007/7/2 8:23:42 eAmon file D:\病毒上报\1234.EXE probably a variant of Win32/TrojanDownloader.Delf.NSA trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/7/2 8:23:38 eAmon file D:\病毒上报\123.EXE probably a variant of Win32/TrojanDownloader.Delf.NSA trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

显示全部楼层 · 发表于 2007-7-2 08:29:00

显示全部楼层 · 发表于 2007-7-2 08:32:26

费尔启发一个。

显示全部楼层 · 发表于 2007-7-2 09:09:39

已删除: 病毒 Trojan.Generic (变种) 文件: C:\Documents and Settings\Administrator\桌面\virus.rar/123.exe
已删除: 病毒 Trojan.Generic (变种) 文件: C:\Documents and Settings\Administrator\桌面\virus.rar/1234.exe

kab报2个杀两个

显示全部楼层 · 发表于 2007-7-2 09:23:52

都不知道wangjay1980用的是什么卡巴，好像只有他的会报得比较多的启发

显示全部楼层 · 发表于 2007-7-2 10:04:15

你用的是哪个KAV 7.0?

怎么还带Heur?

显示全部楼层 · 发表于 2007-7-2 10:05:19

NIS 3G 举例：[c:\documents and settings\administrator\桌面\virus样本\virus.rar]
风险类别: 病毒
整体风险影响: 高
性能: 1
隐私: 1183341811
单击以了解有关该风险的更多信息: Trojan.Packed.NsAnti
采取的操作: 删除失败

2个内部[c:\documents and settings\administrator\桌面\virus样本\virus.rar]
风险类别: 病毒
整体风险影响: 高
性能: 1
隐私: 1183341811
单击以了解有关该风险的更多信息: Downloader
采取的操作: 删除失败

[病毒样本] 大清早的来几个[MD5: A69F3C 6E13D1 CCFAD8 7DB347]

本帖子中包含更多资源

评分

本帖子中包含更多资源

回复 #6 风雪的帖子

回复 #7 jiadm 的帖子

回复 #3 wangjay1980 的帖子

[病毒样本] 大清早的来几个[MD5: A69F3C 6E13D1 CCFAD8 7DB347]

本帖子中包含更多资源

评分

本帖子中包含更多资源

回复 #6 风雪 的帖子

回复 #7 jiadm 的帖子

回复 #3 wangjay1980 的帖子

回复 #6 风雪的帖子