又一个【MD5:52451c】

显示全部楼层 · 发表于 2007-7-13 20:09:07

卡巴启发

显示全部楼层 · 发表于 2007-7-13 20:10:19

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=BehavesLike:Win32.ExplorerHijack

显示全部楼层 · 发表于 2007-7-13 20:12:05

Begin scan in 'C:\Documents and Settings\Administrator\桌面\my.zip'
C:\Documents and Settings\Administrator\桌面\my.zip
  [0] Archive type: ZIP
  --> my.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-13 20:12:10

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.90.37
nvcbin.def revision 5.90.00 of 2007/05/24 17:29:41 (794383 variants)
nvcmacro.def revision 5.90.00 of 2007/05/24 17:15:53 (20339 variants)
Total number of variants: 814722
Command line: "@C:\Users\Jason\AppData\Local\Temp\~OD5DFB.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: D:\virus\my.zip
   79 ms D:\virus\my.zip : my.exe                                  Security Risk Suspicious_F.gen ()
      0 ms D:\virus\my.zip
      0 ms D:\virus\my.zip:Zone.Identifier
- File D:\virus\my.zip quarantined.

===================================================================================================

The scanning started: 2007/07/13 20:06:55
            ended: 2007/07/13 20:06:56
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    3
Number of files scanned..................................:    3
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    1
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-13 20:12:35

C:\ABC\my.zip:\my.exe - 可疑代码段被发现 (Level: 140)
C:\ABC\my.zip

显示全部楼层 · 发表于 2007-7-13 20:12:45

费尔带壳程序。

显示全部楼层 · 发表于 2007-7-13 20:14:24

过了nod。。。。

显示全部楼层 · 发表于 2007-7-13 20:15:01

天啊
连Norman5月24号的病毒库都报了

显示全部楼层 · 发表于 2007-7-13 20:16:17

Starting the file scan:

Begin scan in 'F:\病毒样本\my.zip'
F:\病毒样本\my.zip
  [0] Archive type: ZIP
  --> my.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-13 20:19:47

rs pass

[病毒样本] 又一个【MD5:52451c】

本帖子中包含更多资源