12
返回列表 发新帖
楼主: allenhippo
收起左侧

[病毒样本] 六个[MD5: C41A35 81178B 12ACBF 45D424 1E42EA 888CA2]

[复制链接]
yurius
发表于 2007-7-2 20:45:17 | 显示全部楼层

回复 #8 promised 的帖子

我怀疑是直接用bd报的名字入库了
ikarus我发现过有卡巴、vba32、bd的报发
hj5abc
发表于 2007-7-2 20:48:02 | 显示全部楼层

回复 #4 wenli157 的帖子


Date: 2.7.2007  Time: 20:46:52
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\virus\
F:\virus\1.exe - a variant of Win32/PSW.Delf.NHI trojan
F:\virus\cmdbcs.exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\virus\NewInfo.bmt - a variant of Win32/PSW.Delf.NHI trojan
F:\virus\RemoteDbg.dll - a variant of Win32/Agent.NIK trojan
F:\virus\System64.Sys - probably a variant of Win32/PSW.QQPass.VD trojan
F:\virus\zx.dll - is OK
Number of scanned files: 6
Number of threats found: 5
promised
发表于 2007-7-2 20:48:58 | 显示全部楼层

回复 #11 yurius 的帖子

不对
IKARUS有一次报BEHAVELIKE的时候BD没报
欠妳緈諨
发表于 2007-7-2 20:51:33 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
taihuxian
发表于 2007-7-2 21:04:32 | 显示全部楼层

D

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
DeepScan:Generic.Onlinegames.1.551AFAB7
Trojan.PWS.Onlinegames.AYD   
Generic.PWStealer.9202D9C6   
Generic.PWStealer.EBFFE26   
Generic.PWStealer.369516A7
The EQs
发表于 2007-7-2 21:18:03 | 显示全部楼层
IKARUS是乱报出名的。。。。。
woai_jolin
发表于 2007-7-2 22:45:31 | 显示全部楼层
2007/7/2 22:42:43        Scanning Log
2007/7/2 22:42:43        Version of virus signature database: 2369 (20070702)
2007/7/2 22:42:43        Date: 2.7.2007  Time: 22:42:43
2007/7/2 22:42:43        Scanned disks, folders and files: D:\virus\
2007/7/2 22:42:44        D:\virus\virus.rar - multiple threats - deleted - quarantined
2007/7/2 22:42:44        D:\virus\virus.rar » RAR » System64.Sys - probably a variant of Win32/PSW.QQPass.VD trojan
2007/7/2 22:42:44        D:\virus\virus.rar » RAR » NewInfo.bmt - a variant of Win32/PSW.Delf.NHI trojan
2007/7/2 22:42:44        D:\virus\virus.rar » RAR » 1.exe - a variant of Win32/PSW.Delf.NHI trojan
2007/7/2 22:42:44        D:\virus\virus.rar » RAR » RemoteDbg.dll - a variant of Win32/Agent.NIK trojan
2007/7/2 22:42:44        D:\virus\virus.rar » RAR » cmdbcs.exe - a variant of Win32/PSW.OnLineGames.YA trojan
2007/7/2 22:42:45        Number of scanned files: 7
2007/7/2 22:42:45        Number of threats found: 5
2007/7/2 22:42:45        Time of completion: 22:42:45  Total scanning time: 2 sec (00:00:02)
rest1min
发表于 2007-7-3 00:36:30 | 显示全部楼层
KV2007报杀两个。驱逐舰飘过。
mofunzone
发表于 2007-7-3 01:00:10 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus(2).rar'
C:\Documents and Settings\Administrator\My Documents\
  virus(2).rar
    [0] Archive type: RAR
    --> System64.Sys
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> zx.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> NewInfo.bmt
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Contains signature of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> RemoteDbg.dll
    --> cmdbcs.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
liyukun97065
发表于 2007-7-3 08:51:04 | 显示全部楼层
小红伞高启发5个
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-17 15:38 , Processed in 0.095066 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表