大清早的，一起更新MD5: CD6863C

显示全部楼层 · 发表于 2007-7-17 10:31:31

C:\ABC\moonsilver.rar:\moonsilver.exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现

显示全部楼层 · 发表于 2007-7-17 10:32:26

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/16 18:21:00 (810345 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 830686
Command line: "@C:\Users\Jason\AppData\Local\Temp\~ODBA9F.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: D:\v\moonsilver.exe
   84 ms D:\v\moonsilver.exe                                        Trojan W32/Hupigon.gen67 ()
- File D:\v\moonsilver.exe quarantined.
- File D:\v\moonsilver.exe deleted.

===================================================================================================

The scanning started: 2007/07/16 10:29:19
            ended: 2007/07/16 10:29:20
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    1
Number of files scanned..................................:    1
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-17 10:33:26

Starting the file scan:

Begin scan in 'F:\病毒样本\moonsilver.rar'
F:\病毒样本\moonsilver.rar
  [0] Archive type: RAR
  --> moonsilver.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-17 10:35:14

费尔启发。

显示全部楼层 · 发表于 2007-7-17 10:42:13

扫描开始时间: 2007-7-17 10:38:57
扫描日志
NOD32 版本 2400 (20070716) NT
命令行: H:\样本区\moonsilver.rar
系统内存<病毒 - >

日期: 2007年7月17日时间: 10:40:21
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: H:\样本区\moonsilver.rar
已扫描文件数量: 1
已发现病毒数量: 0
完成时间: 10:40:22 总共扫描时间: 1 秒 (00:00:01)

显示全部楼层 · 发表于 2007-7-17 10:42:30

F:\moonsilver.rar:<RAR>\moonsilver.exe : is suspected of Trojan-PSW.Game.8 (paranoid heuristics)

显示全部楼层 · 发表于 2007-7-17 13:59:00

微点砍掉

显示全部楼层 · 发表于 2007-7-17 14:42:57

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4\moonsilver[1].rar\moonsilver.exe - infected with BackDoor.Pigeon.1604

Archive contains an infected item

[病毒样本] 大清早的，一起更新MD5: CD6863C

本帖子中包含更多资源

本帖子中包含更多资源