[MD5: 19791C D727B9 EE8EF9 6C1BCF FA075A 043936 9D619A A6430F 1FF033 B05522]

显示全部楼层 · 发表于 2007-7-17 23:51:28

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/17 08:12:37 (810868 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 831209
Command line: "@C:\Users\Jason\AppData\Local\Temp\~ODE025.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: D:\v\v\
   767 ms D:\v\v\InternetGameBox.exe
   1029 ms D:\v\v\ipscan221.exe
   597 ms D:\v\v\ivevergp.exe
   15 ms D:\v\v\ixtinig-ofor.exe                                     Trojan W32/Agent.BCZB ()
   16 ms D:\v\v\j3231933.exe                                        Trojan W32/Agent.BSEV ()
   85 ms D:\v\v\jgdagaaa.exe
   3356 ms D:\v\v\jv16_regcleaner.exe
   18 ms D:\v\v\jxjvfp.exe                                           Trojan W32/Multidrp.AAO ()
      8 ms D:\v\v\kdmkz.exe                                           Trojan W32/DNSChanger.NLS ()
      6 ms D:\v\v\kernelwind32.exe                                     Trojan Tibs.gen122 ()
- File D:\v\v\ixtinig-ofor.exe quarantined.
- File D:\v\v\ixtinig-ofor.exe deleted.
- File D:\v\v\j3231933.exe quarantined.
- File D:\v\v\j3231933.exe deleted.
- File D:\v\v\jxjvfp.exe quarantined.
- File D:\v\v\jxjvfp.exe deleted.
- File D:\v\v\kdmkz.exe quarantined.
- File D:\v\v\kdmkz.exe deleted.
- File D:\v\v\kernelwind32.exe quarantined.
- File D:\v\v\kernelwind32.exe deleted.

===================================================================================================

The scanning started: 2007/07/17 23:48:43
            ended: 2007/07/17 23:48:49
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    10
Number of files scanned..................................:    10
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    5

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-17 23:52:46

楼上的命令行的scanner
问官方要的

显示全部楼层 · 发表于 2007-7-17 23:53:51

扫描开始时间: 2007-7-17 23:53:29
扫描日志
NOD32 版本 2403 (20070717) NT
命令行: C:\Documents and Settings\Martin\桌面\样本.rar
系统内存<病毒 - >

日期: 2007年7月17日时间: 23:53:38
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\Martin\桌面\样本.rar
C:\Documents and Settings\Martin\桌面\样本.rar ?RAR ?kdmkz.exe<病毒 - Win32/TrojanDownloader.Zlob 木马> - 是删除目标的一部分
C:\Documents and Settings\Martin\桌面\样本.rar ?RAR ?kernelwind32.exe<病毒 - Win32/TrojanDownloader.Small.AWA 木马> - 是删除目标的一部分
C:\Documents and Settings\Martin\桌面\样本.rar ?RAR ?ivevergp.exe<病毒 - Win32/TrojanDownloader.Agent.NJJ 木马变种>
C:\Documents and Settings\Martin\桌面\样本.rar ?RAR ?ixtinig-ofor.exe<病毒 - Win32/TrojanDownloader.Agent.NIV 木马> - 是删除目标的一部分
C:\Documents and Settings\Martin\桌面\样本.rar ?RAR ?jxjvfp.exe<病毒 - Win32/TrojanDropper.Microjoin.C 木马> - 是删除目标的一部分
已扫描文件数量: 11
已发现病毒数量: 5
已清除病毒的文件数量: 1
完成时间: 23:53:39 总共扫描时间: 1 秒 (00:00:01)

显示全部楼层 · 发表于 2007-7-17 23:54:13

拜托不是命令行的scanner
是nomrna的scan日志

显示全部楼层 · 发表于 2007-7-17 23:55:39

我r
这几天听见scanner就想到命令行
不好意思

显示全部楼层 · 发表于 2007-7-17 23:55:43

Start of the scan: 2007年7月17日  23:55

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> kdmkz.exe
   [DETECTION] Is the Trojan horse TR/DNSChanger.HG.53
  --> kernelwind32.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Tibs.MO
  --> InternetGameBox.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agen.258048
  --> ipscan221.exe
   [DETECTION] Contains signature of the SPR/Tool.Angry program
  --> ivevergp.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> ixtinig-ofor.exe
   [DETECTION] Is the Trojan horse TR/Drop.Age.apd.1.E
  --> j3231933.exe
   [DETECTION] Is the Trojan horse TR/Agent.aom.3
  --> jgdagaaa.exe
   [DETECTION] Is the Trojan horse TR/Zapchast.CA.1
  --> jxjvfp.exe
   [DETECTION] Is the Trojan horse TR/PSW.LdPinch.jm1
   [INFO]    A backup was created as '46cb4d9e.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: 2007年7月17日  23:55
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   12 Files were scanned
   9 viruses and/or unwanted programs were found

显示全部楼层 · 发表于 2007-7-17 23:57:19

jv16_regcleaner.exe这东西我老早就上报过卡巴说不是病毒
ipscan221.exe没有问题
质疑InternetGameBox.exe到底是干嘛，是不是缺了点东西
其他都有问题

[ 本帖最后由 promised 于 2007-7-18 00:01 编辑 ]

显示全部楼层 · 发表于 2007-7-18 00:01:38

promised
我去支持你申请样本区版主了[:26:]

显示全部楼层 · 发表于 2007-7-18 00:01:53

===================================================================================================
NVCC Command Line Scanner 5.90.00

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/17 01:12:37 (810868 variants)
nvcmacro.def revision 5.90.00 of 2007/06/28 23:32:19 (20341 variants)
Total number of variants: 831209
Command line: "/B /CP /C /LF:Nvcc.log /L:1 /SB:1 /S /U /V d:\temp "
===================================================================================================

*** Possible virus found ***
*** d:\temp\ixtinig-ofor.exe -> Trojan W32/Agent.BCZB ()
*** d:\temp\j3231933.exe -> Trojan W32/Agent.BSEV ()
*** d:\temp\jxjvfp.exe -> Trojan W32/Multidrp.AAO ()
*** d:\temp\kdmkz.exe -> Trojan W32/DNSChanger.NLS ()
*** d:\temp\kernelwind32.exe -> Trojan Tibs.gen122 ()

===================================================================================================

[病毒样本] [MD5: 19791C D727B9 EE8EF9 6C1BCF FA075A 043936 9D619A A6430F 1FF033 B05522]

本帖子中包含更多资源

回复 #3 lanvin 的帖子

回复 #3 lanvin 的帖子