[MD5: 6BA084] 一个报的不多

显示全部楼层 · 发表于 2007-7-24 11:14:55

大家来接招吧

显示全部楼层 · 发表于 2007-7-24 11:17:29

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\
  样本.rar
[0] Archive type: RAR
--> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46d3d670.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-24 11:18:28

nod32飘过

显示全部楼层 · 发表于 2007-7-24 11:19:11

avast挂

显示全部楼层 · 发表于 2007-7-24 11:20:56

显示全部楼层 · 发表于 2007-7-24 11:23:12

金山挂!
费尔启发报!!!
微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.031\1.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\L5N.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\Q7LFV.SYS
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-7-24 11:37:55

nod过  蜘蛛过红伞杀
Start of the scan: 2007年7月24日  11:37

Starting the file scan:

Begin scan in 'E:\测试\样本.rar'
E:\测试\样本.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

[ 本帖最后由 dragonkf 于 2007-7-24 11:39 编辑 ]

显示全部楼层 · 发表于 2007-7-24 12:09:10

病毒: Trojan-PSW.Win32.OnLineGames.ru
文件: 样本[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-24 12:10:59

C:\ABC\样本.rar:\1.exe - 特征码 'Packer.Malware.NSAnti.H' 被发现
C:\ABC\样本.rar

2 个文件被扫描
(1 个压缩档 1 个文件)
1 个特征码被侦测
0 个可疑代码段被发现
耗时: 0:00.485

[病毒样本] [MD5: 6BA084] 一个报的不多

本帖子中包含更多资源

本帖子中包含更多资源