今天的下载者，继续更新MD5: D048416E

显示全部楼层 · 发表于 2007-7-16 13:41:44

第二个无法运行第一个没有测试

显示全部楼层 · 发表于 2007-7-16 13:53:16

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/13 18:54:26 (807131 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 827472
Command line: "@C:\Users\Jason\AppData\Local\Temp\~OD753A.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: D:\v\v\
   15 ms D:\v\v\moonsilver.exe                                     Security Risk W32/Suspicious_U.gen ()
   313 ms D:\v\v\moonsilver2.exe
- File D:\v\v\moonsilver.exe quarantined.
- File D:\v\v\moonsilver.exe deleted.

===================================================================================================

The scanning started: 2007/07/16 13:41:55
            ended: 2007/07/16 13:41:56
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    2
Number of files scanned..................................:    2
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-16 13:54:29

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\moonsilver.rar'
C:\Documents and Settings\Administrator\桌面\moonsilver.rar
  [0] Archive type: RAR
  --> moonsilver.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

End of the scan: 2007年7月16日  13:53
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   1 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-7-16 14:16:42

第二个死尸
C:\ABC\moonsilver.rar:\moonsilver.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\moonsilver.rar
C:\ABC\moonsilver2.rar:\moonsilver2.exe
C:\ABC\moonsilver2.rar

4 个文件被扫描
(2 个压缩档 2 个文件)
1 个特征码被侦测
0 个可疑代码段被发现
耗时: 0:00.078

显示全部楼层 · 发表于 2007-7-16 15:29:54

detected: Trojan program Trojan-Downloader.Win32.Small.ewu URL: http://bbs.kafan.cn/attachment.php?aid=101537//moonsilver2.exe

显示全部楼层 · 发表于 2007-7-16 20:20:02

NOD全挂

[病毒样本] 今天的下载者，继续更新MD5: D048416E

本帖子中包含更多资源