卡巴误报？[MD5: 416D19]

显示全部楼层 · 发表于 2007-7-21 17:14:18

卡巴误报？[MD5: 416D19]
已检测到: 病毒 Packed.Win32.Klone.af 文件: C:\Documents and Settings\Administrator\桌面\ipTicker.exe

显示全部楼层 · 发表于 2007-7-21 17:16:43

风暴胜者V2 贺岁精简网络版本
_________您的安全是我们的责任_______________
作者：Sanhuan222@163.com TM:469428271
个人Blog：http://hi.baidu.com/迅者/

===============================================
___________病毒查杀结果__________________

===============================================

2007年5月21日17时18分4秒开始查杀C:\Documents and Settings\Administrator\桌面\virus\PCK
C:\Documents and Settings\Administrator\桌面\virus\PCK\ipTicker.exe 发现未知可疑文件:Win32.NkHack.BDX.A 操作:阻止运行
****************************
您应该引起注意的文件:

-----------------------------------------

=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2007年5月21日17时18分4秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

[ 本帖最后由 FBAV 于 2007-7-21 17:18 编辑 ]

显示全部楼层 · 发表于 2007-7-21 17:17:13

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\3样本.rar'
C:\Documents and Settings\Administrator\桌面\
  3样本.rar
[0] Archive type: RAR
--> ipTicker.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as 'adce375d.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-21 17:18:16

dr 报鸽子.

显示全部楼层 · 发表于 2007-7-21 17:18:20

无事
动作如下

显示全部楼层 · 发表于 2007-7-21 17:19:53

是查IP地址的

显示全部楼层 · 发表于 2007-7-21 17:22:46

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/19 17:24:52 (812833 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 833174
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~ODA.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: F:\v\ipTicker.exe
   15 ms F:\v\ipTicker.exe                                           Trojan Hupigon.gen12 ()
- File F:\v\ipTicker.exe quarantined.
- File F:\v\ipTicker.exe deleted.

===================================================================================================

The scanning started: 2007/07/21 17:19:52
            ended: 2007/07/21 17:19:52
Logged on as       : Administrator
on hostname       : BE29C0E1C4C9406

Scanning results:
Total number of files found..............................:    1
Number of files scanned..................................:    1
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    1

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-21 17:23:12

一个工具～～～～～～！

[ 本帖最后由 1p1 于 2007-7-21 17:24 编辑 ]

显示全部楼层 · 发表于 2007-7-21 17:26:20

没有恶意程序，误报。

显示全部楼层 · 发表于 2007-7-21 17:30:21

咖啡也报

[病毒样本] 卡巴误报？[MD5: 416D19]

本帖子中包含更多资源

本帖子中包含更多资源