[MD5: 41371A 5B22EE F2A3C5 F68B38 DC6F59]

显示全部楼层 · 发表于 2007-8-14 13:26:39

用AntiVirusKit扫描病毒
版本 16.0.7
病毒库签名 2007-8-13
开始时间: 2007-8-14 13:25
引擎: KAV 引擎 (AVK 17.6833), BD  引擎 (BD 17.4714)
启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: sevricesc.exe
路径: G:\样本\0801405
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.bvi (KAV 引擎), BehavesLike:Win32.ExplorerHijack (BD  引擎)
对象: serviecsd.exe
路径: G:\样本\0801405
Status: 已发现病毒
病毒: not-a-virus:Downloader.Win32.WinFixer.u (KAV 引擎)
对象: servciesa.exe
路径: G:\样本\0801405
Status: 已发现病毒
病毒: GenPack:Trojan.Flooder.D (BD  引擎)
对象: serivcesb.exe
路径: G:\样本\0801405
Status: 已发现病毒
病毒: not-a-virus:Downloader.Win32.WinFixer.u (KAV 引擎)
分析完毕: 2007-8-14 13:25
已检查 5 个文件
已发现 4 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2007-8-14 13:40:56

http://bbs.kafan.cn/attachment.php?aid=113425\servciese.exe\[eXPressor] [L] Win32:Agent-GZY [Wrm] (0)
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IX55K83W\0801405[1].rar\servciese.exe\[eXPressor] [L] Win32:Agent-GZY [Wrm] (0)
During the file repair, error occurred: The file was not repaired.
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IX55K83W\0801405[1].rar\servciesa.exe [L] Win32:Klone-CB [Trj] (0)
During the file repair, error occurred: The file was not repaired.
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IX55K83W\0801405[1].rar\serivcesb.exe\[eXPressor] [L] Win32:Delf-DNR [Trj] (0)
During the file repair, error occurred: The file was not repaired.
File was successfully moved to chest...

显示全部楼层 · 发表于 2007-8-14 13:44:32

kv2008这一次杀了4个，还算不错

显示全部楼层 · 发表于 2007-8-14 13:53:41

kis7扫到6个

显示全部楼层 · 发表于 2007-8-14 14:52:58

C:\Documents and Settings\uhthn\Desktop\0801405.rar:<RAR>\servciese.exe : infected Backdoor.Win32.Agent.fs
C:\Documents and Settings\uhthn\Desktop\0801405.rar:<RAR>\serivcesb.exe : infected MalwareScope.Trojan-PSW.Game.14

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 5    - total    : 1
- scanned       : 1    -  scanned : 5    - scanned    : 1
- contain viruses : 1    -  infected : 2    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

[病毒样本] [MD5: 41371A 5B22EE F2A3C5 F68B38 DC6F59]