2[bec612][bb6432]

显示全部楼层 · 发表于 2007-8-24 09:39:42

Start of the scan: 2007年8月24日  09:39

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\2.zip
  [0] Archive type: ZIP
  --> 6.exe
   [DETECTION] Is the Trojan horse TR/Agent.12521
  --> 7.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年8月24日  09:39
Used time: 00:11 min

显示全部楼层 · 发表于 2007-8-24 09:41:01

为PC护航风暴微塔
_____________________________________________

         风暴微塔反间谋
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
                        [内测版]
               http://www.v0day.com/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\2677676\6.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\2677676\7.exe]
                  …………引擎[2]发现病毒:Win32.Nop d*o
文件数:2 病毒数:2  比重:1
OK  扫描完毕！

显示全部楼层 · 发表于 2007-8-24 09:41:32

2007-8-24 9:41:24 Scanning Log
2007-8-24 9:41:24 Version of virus signature database: 2481 (20070823)
2007-8-24 9:41:24 Date: 24.8.2007 Time: 09:41:24
2007-8-24 9:41:24 Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\2.zip
2007-8-24 9:41:25 D:\Documents and Settings\EKINCHENG\桌面\2.zip » ZIP » 6.exe - probably a variant of Win32/Genetik trojan
2007-8-24 9:41:25 D:\Documents and Settings\EKINCHENG\桌面\2.zip » ZIP » 7.exe - probably a variant of Win32/Agent.NEO trojan
2007-8-24 9:41:25 Number of scanned files: 3
2007-8-24 9:41:25 Number of threats found: 2
2007-8-24 9:41:25 Time of completion: 09:41:25 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-8-24 09:41:49

2007-8-24 9:41:44 Scanning Log
2007-8-24 9:41:44 Version of virus signature database: 2481 (20070823)
2007-8-24 9:41:44 Date: 24.8.2007 Time: 09:41:44
2007-8-24 9:41:44 Scanned disks, folders and files: F:\v\2.zip
2007-8-24 9:41:44 F:\v\2.zip » ZIP » 6.exe - probably a variant of Win32/Genetik trojan
2007-8-24 9:41:44 F:\v\2.zip » ZIP » 7.exe - probably a variant of Win32/Agent.NEO trojan
2007-8-24 9:41:44 Number of scanned files: 3
2007-8-24 9:41:44 Number of threats found: 2
2007-8-24 9:41:44 Time of completion: 09:41:44 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-8-24 09:44:28

.......

扫描多没意思

显示全部楼层 · 发表于 2007-8-24 10:40:59

显示全部楼层 · 发表于 2007-8-24 10:49:09

C:\ABC\2\6.exe - 特征码 'Generic.Dld.Agent' 被发现
C:\ABC\2\7.exe - 特征码 'Virus.Win32.Agent.KCP' 被发现

2 文件被扫描
(0 压缩档 0 文件)
2 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.000

显示全部楼层 · 发表于 2007-8-24 10:50:01

IK实在是太强了。。。。病毒库有N多杀软的身影。。。。。。

显示全部楼层 · 发表于 2007-8-24 10:58:31

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\6.EXE
1) C:\DFD436140.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\6.EXE
1) C:\DFD436140.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\7.EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\7B70EAC1.EXE
2) C:\WINDOWS.0\SYSTEM32\DELME.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\7.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\7B70EAC1.EXE
2) C:\WINDOWS.0\SYSTEM32\94F7F36A.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\7.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\7B70EAC1.EXE
2) C:\WINDOWS.0\SYSTEM32\94F7F36A.DLL
是否删除木马程序及其衍生物?

[病毒样本] 2[bec612][bb6432]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源