MD5: 92F67B

显示全部楼层 · 发表于 2007-8-14 22:09:56

卡七报。。。
Hello,

70FBBAB4.exey - Backdoor.Win32.Agent.ari

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering

[ 本帖最后由自由于 2007-8-14 23:43 编辑 ]

显示全部楼层 · 发表于 2007-8-14 22:11:52

为PC护航风暴微塔
_____________________________________________

         风暴微塔反病毒
                        [内测版]
               http://www.v0day.com/
----------------------------------------------
开始扫描……

[C:\Documents and Settings\Administrator\桌面\virus\4444444444444.rar]
                  …………引擎[2]发现病毒:Win32.Nop 寀<l
OK  扫描完毕！

显示全部楼层 · 发表于 2007-8-14 22:11:58

微点直接报了：
蠕虫名称:Worm.Win32.Agent.dql

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\70FBBAB4.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-8-14 22:18:31

http://bbs.kafan.cn/attachment.php?aid=113721\70FBBAB4.EXE\[NsPack]\[Embedded#04010] [L] Win32:Agent-JOF [Trj] (0)
文件被成功移至隔离区...

显示全部楼层 · 发表于 2007-8-14 22:53:05

病毒: Win32:Agent-HFX [Trj]
文件: 样本[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4
进程: Maxthon.exe

显示全部楼层 · 发表于 2007-8-15 01:07:08

C:\Documents and Settings\uhthn\Desktop\1.rar:<RAR>\70FBBAB4.EXE : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 1
- scanned       : 1    -  scanned : 1    - scanned    : 1
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 1    - suspicious  : 1

显示全部楼层 · 发表于 2007-8-15 03:14:46

TrustPort Antivirus pass

显示全部楼层 · 发表于 2007-8-15 03:25:51

Scan performed at: 2007-8-15 3:25:36
Scanning Log
NOD32 version 2460 (20070814) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 15.8.2007 Time: 03:25:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?70FBBAB4.EXE - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 03:25:43 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-8-15 05:55:49

Trojan.IMMSG.Win32.TBMSG.jy

显示全部楼层 · 发表于 2007-8-15 07:08:33

--> 70FBBAB4.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46f09cf0.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

[病毒样本] MD5: 92F67B

本帖子中包含更多资源