3个 [MD5: 01CCAC 6ACDB9 194C08]

显示全部楼层 · 发表于 2007-8-15 13:15:10

咖啡报QQGAME

显示全部楼层 · 发表于 2007-8-15 13:15:19

瑞星2008没报

显示全部楼层 · 发表于 2007-8-15 13:16:37

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MM.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSYH.BAK
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MM1.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\XZZ.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\PUSONNG.EXE
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\PSCHFVK.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-8-15 13:19:05

XZZ.EXE没报

显示全部楼层 · 发表于 2007-8-15 13:23:21

我的X星2008也没报,汗一个......

显示全部楼层 · 发表于 2007-8-15 13:23:24

病毒: Win32:Delf-EVJ [Wrm], Win32:Nilage-AI [Trj] (2x)
文件: 样本[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\AHXU7A5C
进程: Maxthon.exe

显示全部楼层 · 发表于 2007-8-15 13:36:13

过驱逐舰，BD

C:\Documents and Settings\同同\桌面\样本.rar=>xzz.exe Infected: Generic.Malware.SP!Pk!g.D4A66C88
C:\Documents and Settings\同同\桌面\样本.rar=>xzz.exe Disinfection failed
C:\Documents and Settings\同同\桌面\样本.rar=>xzz.exe Move failed
C:\Documents and Settings\同同\桌面\样本.rar=>MM.exe Infected: DeepScan:Generic.PWStealer.CD10E3ED
C:\Documents and Settings\同同\桌面\样本.rar=>MM.exe Disinfection failed
C:\Documents and Settings\同同\桌面\样本.rar=>MM.exe Move failed
C:\Documents and Settings\同同\桌面\样本.rar=>MM1.exe Infected: DeepScan:Generic.PWStealer.B9E4347C
C:\Documents and Settings\同同\桌面\样本.rar=>MM1.exe Disinfection failed
C:\Documents and Settings\同同\桌面\样本.rar=>MM1.exe Move failed

显示全部楼层 · 发表于 2007-8-15 13:41:50

Start of the scan: 2007年8月15日  13:41

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\样本.rar
  [0] Archive type: RAR
  --> xzz.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> MM.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> MM1.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年8月15日  13:41
Used time: 00:17 min

The scan has been done completely.

   1 Scanning directories
   4 Files were scanned
   3 viruses and/or unwanted programs were found
   1 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-15 14:04:46

扫描开始时间: 2007-8-15 14:02:46
扫描日志
NOD32 版本 2461 (20070815) NT
命令行: F:\virus\样本13.rar

日期: 2007年8月15日时间: 14:02:47
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\样本13.rar
F:\virus\样本13.rar ?RAR ?xzz.exe<病毒 - Win32/Delf.NDF 蠕虫变种>
F:\virus\样本13.rar ?RAR ?MM.exe<病毒 - 可能是 Win32/Genetik 木马变种>
F:\virus\样本13.rar ?RAR ?MM1.exe<病毒 - 可能是 Win32/Genetik 木马变种>
已扫描文件数量: 3
已发现病毒数量: 3
完成时间: 14:02:47 总共扫描时间: 0 秒 (00:00:00)

[病毒样本] 3个 [MD5: 01CCAC 6ACDB9 194C08]

本帖子中包含更多资源

本帖子中包含更多资源

3个!