MSN蠕虫全球爆发，今天开始流传。 MD5：a7814a

显示全部楼层 · 发表于 2007-7-2 21:26:51

病毒的大致情况见：http://hi.baidu.com/pluto1313

卡巴已知，暂不知其他AV的处理速度

显示全部楼层 · 发表于 2007-7-2 21:28:12

?       Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /n.../af+ /fd+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\virus.exe : infected Trojan.MulDrop.7373
Program execution terminated by user

Directories    : 3    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 13
- scanned       : 1    -  scanned : 1    - scanned    : 13
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Startup : 21:27:57 02-07-2007
End       : 21:28:01 02-07-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?
C:\ABC\virus.rar:\virus.exe - Signature 'Generic.Dropper.Delf' found
C:\ABC\virus.rar

2 Files scanned
   (1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.016

显示全部楼层 · 发表于 2007-7-2 21:28:18

Scan performed at: 2007-7-2 21:28:05
Scanning Log
NOD32 version 2369 (20070702) NT
Command line: C:\Documents and Settings\EQ2\桌面\33334.rar
Operating memory - is OK

Date: 2.7.2007 Time: 21:28:10
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\33334.rar
C:\Documents and Settings\EQ2\桌面\33334.rar ?RAR ?virus.exe - Win32/IRCBot.XW trojan - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 21:28:10 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-2 21:28:59

病毒: Backdoor.Win32.IRCBot.acd
文件: virus[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-2 21:29:45

这是蠕虫吗。。。为啥nod32报的是木马？？。。。。。

显示全部楼层 · 发表于 2007-7-2 21:31:24

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.IRCbot.w

用户来源：互联网

软件版本：19.30.02

显示全部楼层 · 发表于 2007-7-2 21:31:24

喜欢杀蠕虫，不知是否应该高兴

显示全部楼层 · 发表于 2007-7-2 21:32:28

可以说是蠕虫，可以说的后门
全球性的病毒，个大AV的处理速度应该都能跟上

显示全部楼层 · 发表于 2007-7-2 21:34:16

nod32今天才更新的。。。。。

显示全部楼层 · 发表于 2007-7-2 21:36:01

Starting the file scan:

Begin scan in 'F:\病毒样本\virus.rar'
F:\病毒样本\virus.rar
  [0] Archive type: RAR
  --> virus.exe
   [DETECTION] Contains signature of the worm WORM/IRCBot.52736.4
   [INFO]    The file was deleted!

[病毒样本] MSN蠕虫全球爆发，今天开始流传。 MD5：a7814a

本帖子中包含更多资源

nod32最喜欢杀蠕虫了

浏览过的版块