[MD5: CA3A8C 54B163]

显示全部楼层 · 发表于 2007-7-9 13:07:55

国外的2个,不知道第一个Trojan.DNSChager.jc是干什么的...

显示全部楼层 · 发表于 2007-7-9 13:09:14

deleted: Trojan program Trojan-Downloader.Win32.IstBar.pn File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/istdownload.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan.Win32.DNSChanger.jc File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/ZCodec1000.exe//stream

显示全部楼层 · 发表于 2007-7-9 13:12:59

AVAST报马！

显示全部楼层 · 发表于 2007-7-9 13:18:33

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> istdownload.exe
   [DETECTION] Is the Trojan horse TR/Dldr.IstBar.PN.1
  --> ZCodec1000.exe
   [DETECTION] Is the Trojan horse TR/DNSChanger.CA.4
   [INFO]    The file was moved to '46c02c44.qua'!

End of the scan: 2007年7月9日  13:18
Used time: 00:08 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   2 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-7-9 13:28:22

费尔一个。

显示全部楼层 · 发表于 2007-7-9 13:55:10

c:\ABC\样本\istdownload.exe - Signature 'AdWare.SurfAccuracy.B' found

显示全部楼层 · 发表于 2007-7-9 13:57:37

显示全部楼层 · 发表于 2007-7-9 15:32:33

Scan performed at: 2007-7-9 15:31:59
Scanning Log
NOD32 version 2384 (20070708) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 9.7.2007 Time: 15:32:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?istdownload.exe - Win32/TrojanDownloader.IstBar trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?ZCodec1000.exe ?NSIS ?logo.jpg ?RAR ?rar.exe - Incorrect file checksum (CRC), the file is probably password protected.
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?ZCodec1000.exe ?NSIS ?logo.jpg ?RAR ?zip.exe - Incorrect file checksum (CRC), the file is probably password protected.
Number of scanned files: 7
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:32:06 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-9 16:30:15

C:\Documents and Settings\uhthn\Desktop\1.rar:<RAR>\istdownload.exe : infected Trojan.Isbar.461

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 2    - total    : 1
- scanned       : 1    -  scanned : 2    - scanned    : 1
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

显示全部楼层 · 发表于 2007-7-9 16:34:15

斧头监控命中

[病毒样本] [MD5: CA3A8C 54B163]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源