毒网加样本[MD5: C2FA4D]

显示全部楼层 · 发表于 2007-7-15 21:21:57

靠，楼主发帖请注明出处哈，那是我在剑盟发的
你也太懒了，直接就COPY来了

显示全部楼层 · 发表于 2007-7-15 21:49:16

LZ以后要注意了哈。
去剑盟看了下，好像确实楼上所说~~
你连标题都没改基本。。

显示全部楼层 · 发表于 2007-7-15 22:40:26

C:\Documents and Settings\Administrator\桌面\样本
.rar>>a.exe Trojan.Mnless.maz

显示全部楼层 · 发表于 2007-7-15 22:47:32

上报

显示全部楼层 · 发表于 2007-7-16 06:20:48

Kaspersky Anti-Virus 6.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=101296 is infected with Backdoor.Win32.Agent.air virus

显示全部楼层 · 发表于 2007-7-16 12:18:44

卡巴6：
已删除: 木马程序 Backdoor.Win32.Agent.air 文件: C:\Documents and Settings\Administrator\桌面\样本\a.exe

显示全部楼层 · 发表于 2007-7-16 13:59:24

味精都报出来了

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/13 18:54:26 (807131 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 827472
Command line: "@C:\Users\Jason\AppData\Local\Temp\~ODB9C1.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: D:\v\v\
   156 ms D:\v\v\a.exe                                              Virus W32/Viking.gen5 ()
- File D:\v\v\a.exe quarantined.
- File D:\v\v\a.exe deleted.

===================================================================================================

The scanning started: 2007/07/16 13:47:42
            ended: 2007/07/16 13:47:43
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    1
Number of files scanned..................................:    1
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-16 14:15:43

即将下载，卡巴报并提示！

[ 本帖最后由 onlyboy 于 2007-7-16 14:17 编辑 ]

显示全部楼层 · 发表于 2007-7-16 21:52:19

时间模块对象名称病毒操作用户信息
2007-7-16 21:40:06 文件监控文件 F:\TDdownload\样本\feeling.EXE Win32/Livup.C 木马已隔离 - 已删除应用程序试图创建新文件时发生事件: C:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。

[病毒样本] 毒网加样本[MD5: C2FA4D]

本帖子中包含更多资源