晚上四个[MD5: 80A0E0 CAEA86 BECB7F A6C9BB]

显示全部楼层 · 发表于 2007-7-2 19:59:12

现在的品质越来越差，难以过卡巴7了

显示全部楼层 · 发表于 2007-7-2 20:00:20

License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /n.../af+ /fd+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\2[1].exe : is suspected of Downloader.Small.160
C:\ABC\virus.rar:<RAR>\3[1].exe : infected MalwareScope.Trojan-PSW.Game.3
C:\ABC\virus.rar:<RAR>\4[1].exe : infected MalwareScope.Trojan-PSW.Game.3
C:\ABC\virus.rar:<RAR>\6[1].exe : infected MalwareScope.Trojan-PSW.Game.3
Program execution terminated by user

Directories    : 3    Files in archives:    Files on disks:
Archives:                - total    : 4    - total    : 8
- scanned       : 1    -  scanned : 4    - scanned    : 8
- contain viruses : 1    -  infected : 3    - infected : 1
- deleted       : 0    -  suspicious : 1    - suspicious  : 0

Startup : 20:00:12 02-07-2007
End       : 20:00:17 02-07-2007
Total time : 00:00:05
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-7-2 20:01:02

病毒: Win32:Onlinegames-ACS [Trj], Win32:Onlinegames-ACD [Trj] (2x), Win32:Onlinegames-AEA [Trj]
文件: virus[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-2 20:04:39

AVK里的卡6引擎都没反应，而BD和AVAST这俩引擎都是通杀

显示全部楼层 · 发表于 2007-7-2 20:05:34

原帖由 allenhippo 于 2007-7-2 19:59 发表
现在的品质越来越差，难以过卡巴7了

是啊,连DR WEB 都没过,全查出了.

显示全部楼层 · 发表于 2007-7-2 20:07:27

红伞四个全杀

显示全部楼层 · 发表于 2007-7-2 20:08:44

virus.rar\2[1].exe;D:\Documents and Settings\dell\桌面\virus.rar;Probably MULDROP.Trojan;;
virus.rar\3[1].exe;D:\Documents and Settings\dell\桌面\virus.rar;Trojan.PWS.Gamania;;
virus.rar\4[1].exe;D:\Documents and Settings\dell\桌面\virus.rar;Probably MULDROP.Trojan;;
virus.rar\6[1].exe;D:\Documents and Settings\dell\桌面\virus.rar;Probably MULDROP.Trojan;;

显示全部楼层 · 发表于 2007-7-2 20:09:21

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/2[1].exe//PE_Patch//UPack
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/3[1].exe
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/4[1].exe
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/6[1].exe

显示全部楼层 · 发表于 2007-7-2 20:12:12

比起红伞,DR正是有些显的老实了,上官网扫描还能报出加的啥壳呢,这报报壳多好啊,查杀率也提高些了.

显示全部楼层 · 发表于 2007-7-2 20:13:38

NOD32报来报去好像都是这几个..

Scanned disks, folders and files: F:\virus.rar
F:\virus.rar ?RAR ?2[1].exe - a variant of Win32/PSW.Agent.NEW trojan
F:\virus.rar ?RAR ?3[1].exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\virus.rar ?RAR ?4[1].exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\virus.rar ?RAR ?6[1].exe - a variant of Win32/PSW.OnLineGames.YA trojan

[病毒样本] 晚上四个[MD5: 80A0E0 CAEA86 BECB7F A6C9BB]

本帖子中包含更多资源

刚才没仔细看有三个启发

浏览过的版块