[MD5: 503632]

显示全部楼层 · 发表于 2007-7-2 10:33:03

Scan performed at: 2007-7-2 10:32:41
Scanning Log
NOD32 version 2368 (20070701) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 2.7.2007 Time: 10:32:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?commomd.pif - Win32/Agent.AJ worm - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 10:32:45 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-2 10:35:07

你不是考试吗
Hello.

New malicious software was found in the attached file.
Virus.Win32.AutoRun.ac
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Roman Gavrilchenko
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com
http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 wangjay1980 于 2007-7-2 15:27 编辑 ]

显示全部楼层 · 发表于 2007-7-2 10:35:13

浓缩精华

显示全部楼层 · 发表于 2007-7-2 10:35:49

C:\Documents and Settings\Administrator\桌面\样本
.rar>>commomd.pif>>1 Worm.Tinret.a
狮子干掉一个

显示全部楼层 · 发表于 2007-7-2 10:35:53

下午考试。。。。

显示全部楼层 · 发表于 2007-7-2 10:37:08

希望你考试顺利哦

显示全部楼层 · 发表于 2007-7-2 10:52:27

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
[0] Archive type: RAR
--> commomd.pif
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-2 11:02:19

?       Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /n.../af+ /fd+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\样本.rar:<RAR>\commomd.pif : infected Worm.Win32.Agent.AJ
Program execution terminated by user

Directories    : 3    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 15
- scanned       : 1    -  scanned : 1    - scanned    : 14
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Startup : 11:02:08 02-07-2007
End       : 11:02:12 02-07-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-7-2 15:27:54

Hello.

New malicious software was found in the attached file.
Virus.Win32.AutoRun.ac
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Roman Gavrilchenko
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com
http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] [MD5: 503632]

本帖子中包含更多资源

为什么觉得现在的样本越来越小了？？

回复 #6 EQ2 的帖子