来三个[MD5: 65CA2A 25B1D7 972012]

显示全部楼层 · 发表于 2007-7-13 19:40:15

显示全部楼层 · 发表于 2007-7-13 19:41:31

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> 12.exe
   [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> 123.exe
   [DETECTION] Is the Trojan horse TR/Spy.15872.B
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-13 19:41:35

一个..

F:\样本.rar »RAR »1.exe - a variant of Win32/TrojanDownloader.Delf.AVR trojan

显示全部楼层 · 发表于 2007-7-13 19:43:16

C:\ABC\样本.rar:\1.exe - 特征码 'Backdoor.Win32.PcClient.GV' 被发现
C:\ABC\样本.rar:\12.exe - 特征码 'Trojan.Delf.NEB' 被发现
C:\ABC\样本.rar:\123.exe - 特征码 'Backdoor.Win32.Bifrose.adr' 被发现
C:\ABC\样本.rar

4 个文件被扫描
(1 个压缩档 3 个文件)
3 个特征码被侦测
0 个可疑代码段被发现
耗时: 0:00.391

显示全部楼层 · 发表于 2007-7-13 19:45:54

detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/1.exe
detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/1.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.Agent.mi File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/12.exe//FSG

显示全部楼层 · 发表于 2007-7-13 20:09:01

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Generic.PWStealer.BB2A68E0
http://www.bitdefender.com/vfind/?q=Dropped:Generic.Malware.Fdld.76AE319B

显示全部楼层 · 发表于 2007-7-13 20:18:15

norman一个
========================================================
Norman Message [2007/07/13 20:11:40]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.0.5
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'Jason' on host 'JASON-PC'.
File infected: d:/virus/12.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

显示全部楼层 · 发表于 2007-7-13 20:20:25

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Agent.gh

用户来源：互联网

软件版本：19.31.42

显示全部楼层 · 发表于 2007-7-13 20:20:40

norman的启发.?

显示全部楼层 · 发表于 2007-7-13 20:24:40

scan不报
解压报
郁闷不是启发应该是sandbox

[病毒样本] 来三个[MD5: 65CA2A 25B1D7 972012]

本帖子中包含更多资源

回复 #7 woai_jolin 的帖子

回复 #9 hj5abc 的帖子

浏览过的版块