新威金样本+[凝逸反毒]威金解毒測試

qqq000@qq.com

新威金样本+[凝逸反毒]威金解毒測試
----------
              [凝逸反毒] (http://hi.baidu.com/503165656)
       [凝逸.分析感染PE引擎-日志]       2007.7.18 13:13:44
文件:F:\070717\威金解毒\Yahoo! Magic Messenger.exe
操作:
     ┝1 |75764|DF6C22| -->
     ┝2 |11056|6AAEB7| -->
     ┝3 |28426|A87CE6| -->
     ┝4 |37888|5F71AC| -->
扫描完成|感染:1 文件:1|耗时:931
----------
              [凝逸反毒] (http://hi.baidu.com/503165656)
       [凝逸.分析感染PE引擎-日志]       2007.7.18 13:20:25
文件:F:\070717\威金解毒\Yahoo! Magic Messenger.exe
操作:修复文件
     ┝2 |37888|5F71AC| -->





试下:修复感染
【凝逸实验室】-[凝逸反毒]
QQ:503165656
主页:http://hi.baidu.com/503165656
下载:http://groups.google.com/group/503165656/web/nyfd.zip
修复:感染威金,熊猫,卤猪,Virus.Win32.Delf,Win32.HLLW,Trojan.Starter
方法:  [分析感染PE]引擎/[修复感染EXE]引擎/
杀不了,样本发到:503165656@qq.com

moonsilver

凝逸的东西越做越强了

qqq000@qq.com

  谢谢

一派胡言

kv2007
在 C:\Documents and Settings\Administrator\桌面\感染的Yahoo! Magic Messenger.exe 中发现 Worm/Viking.aqh 病毒, 已清除

[ 本帖最后由 一派胡言 于 2007-7-18 13:55 编辑 ]

风雪

1184737664,2007-7-18 13:47:44,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\[凝逸反毒]威金解毒測試.zip>>修复的Yahoo! Magic Messenger.exe,Manual scan
1184737664,2007-7-18 13:47:44,Worm.Viking.le.zvyr.arc,病毒,mygood,D:\3\新建文件夹\新建文件夹\[凝逸反毒]威金解毒測試.zip>>感染的Yahoo! Magic Messenger.exe,Manual scan
费尔。

woai_jolin

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/17 08:12:37 (810868 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 831209
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD8F.tmp"
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: D:\v\[凝逸反毒]威金解毒測試.zip
      891 ms D:\v\[凝逸反毒]威金解毒測試.zip : 修复的Yahoo! Magic Messenger.exe
       47 ms D:\v\[凝逸反毒]威金解毒測試.zip : [凝逸反毒]威金解毒測試.txt
        0 ms D:\v\[凝逸反毒]威金解毒測試.zip : [凝逸反毒]威金解毒測試.JPG
       16 ms D:\v\[凝逸反毒]威金解毒測試.zip : 感染的Yahoo! Magic Messenger.exe Virus W32/Viking.IK ()
        0 ms D:\v\[凝逸反毒]威金解毒測試.zip                             
        0 ms D:\v\[凝逸反毒]威金解毒測試.zip:Zone.Identifier            
- File D:\v\[凝逸反毒]威金解毒測試.zip quarantined.
- Virus W32/Viking.IK () removed.

===================================================================================================

The scanning started: 2007/07/18 13:47:49
               ended: 2007/07/18 13:47:50
Logged on as        : Administrator
on hostname         : BE29C0E1C4C9406

Scanning results:
   Total number of files found..............................:       6
   Number of files scanned..................................:       6
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       1
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       1

Copyright (c) 1993-2005 Norman ASA.

sharkkong

已检测到: 木马程序 Trojan-PSW.Win32.Delf.sp        URL: http://bbs.kafan.cn/attachment.php?aid=102303/感染的Yahoo! Magic Messenger.exe//PE_Patch.AvSpoof
又见猪叫。KAV 7

欠妳緈諨

电影结束了

Scan performed at: 2007-7-18 14:01:37
Scanning Log
NOD32 version 2404 (20070717) NT
Command line: C:\Documents and Settings\wangcheng\桌面\[凝逸反毒]威金解毒測試.zip
C:\Program Files\Eset\nod32.exe - is OK

Date: 18.7.2007  Time: 14:01:39
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\桌面\[凝逸反毒]威金解毒測試.zip
C:\Documents and Settings\wangcheng\桌面\[凝逸反毒]威金解毒測試.zip ?ZIP ?修复的Yahoo! Magic Messenger.exe ?ASPack v2.12 - is OK
C:\Documents and Settings\wangcheng\桌面\[凝逸反毒]威金解毒測試.zip ?ZIP ?[凝逸反毒]威金解毒測試.txt - is OK
C:\Documents and Settings\wangcheng\桌面\[凝逸反毒]威金解毒測試.zip ?ZIP ?[凝逸反毒]威金解毒測試.JPG - is OK
C:\Documents and Settings\wangcheng\桌面\[凝逸反毒]威金解毒測試.zip ?ZIP ?感染的Yahoo! Magic Messenger.exe - Win32/Viking.CH virus
Number of scanned files: 5
Number of threats found: 1
Number of active threats: 1
Time of completion: 14:01:41 Total scanning time: 2 sec (00:00:02)

liyukun97065