强病毒样本system.rar[73D6FD]

qqq000@qq.com

强病毒样本system.rar
很黑的东东

[ 本帖最后由 promised 于 2007-7-28 11:17 编辑 ]

红心王子

C:\Documents and Settings\Administrator\桌面\syst
em.rar>>system.EXE>>mew11_1
Worm.VB.amp

woai_jolin

sharkkong

NND，被猪吓到了
Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=105819 is infected with Virus.Win32.VB.dv virus

野马

还可以，动作丰富

[ 本帖最后由 野马 于 2007-7-27 20:05 编辑 ]

Nblock

micropoint

[ 本帖最后由 Nblock 于 2007-7-28 10:19 编辑 ]

zxy900906

Scan performed at: 2007-7-27 20:04:00
Scanning Log
NOD32 version 2424 (20070726) NT
Command line: C:\Documents and Settings\Administrator\桌面\system.rar

Date: 27.7.2007  Time: 20:04:03
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\system.rar
C:\Documents and Settings\Administrator\桌面\system.rar ?RAR ?system.EXE - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 20:04:04 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

微点卫士

费尔:W32.VB.dv.detr
金山报1个

微点:
蠕虫名称:Worm.Win32.VB.lp

程序:
C:\WINDOWS.0\SYSTEM32\DRIVERS\WINLOGON.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.282\SYSTEM.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\DRIVERS\SERVICES.EXE
2) C:\KRECYCLE\KRECYCLE.EXE
3) C:\MSOCACHE\MSOCACHE.EXE
是否删除木马程序及其衍生物?

Nerazzurri

nod

Scan performed at: 2007-7-27 20:03:18
Scanning Log
NOD32 version 2424 (20070726) NT
Command line: C:\Documents and Settings\Kevin\Desktop\病毒样本\system.rar

Date: 27.7.2007  Time: 20:03:20
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Kevin\Desktop\病毒样本\system.rar
C:\Documents and Settings\Kevin\Desktop\病毒样本\system.rar ?RAR ?system.EXE - probably unknown NewHeur_PE virus [7]
Number of scanned files: 1
Number of threats found: 1
Time of completion: 20:03:21 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.
___________
avira

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Kevin\Desktop\病毒样本\system.rar'
C:\Documents and Settings\Kevin\Desktop\病毒样本\system.rar
  [0] Archive type: RAR
  --> system.EXE
      [DETECTION] Contains signature of the worm WORM/VB.dv.3.A
      [INFO]      The file was deleted!

微点卫士

原帖由 Nblock 于 2007-7-27 20:03 发表
micropoint

大哥,你的衍生物怎么到E盘去了