[MD5: FC509C 09A950 3DB74F]

显示全部楼层 · 发表于 2007-8-29 23:34:35

未发现: 病毒 Heur.Invader (变种) 文件: D:\病毒库\Tonger2003.zip/vipzz.exe

显示全部楼层 · 发表于 2007-8-29 23:45:11

ess..

F:\Tonger2003.zip » ZIP » vipzz.exe - probably unknown NewHeur_PE virus
F:\Tonger2003.zip » ZIP » vip.exe - probably a variant of Win32/Agent.NEO trojan

显示全部楼层 · 发表于 2007-8-29 23:45:20

C:\Documents and Settings\uhthn\Desktop\virus\vipzz.exe : is suspected of Win32.Trojan.Downloader (http://...)
C:\Documents and Settings\uhthn\Desktop\virus\vip.exe : infected Backdoor.Win32.Agent.avz

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 0    - total    : 3
- scanned       : 0    -  scanned : 0    - scanned    : 3
- contain viruses : 0    -  infected : 0    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 1

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\vipzz.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\top.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\vip.exe - OK

3 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-8-29 23:45:57

Begin scan in 'C:\Documents and Settings\dell\桌面\Tonger2003.zip'
C:\Documents and Settings\dell\桌面\Tonger2003.zip
  [0] Archive type: ZIP
  --> vipzz.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> top.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.4081
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-30 00:12:10

已隔离: 病毒 Heur.Invader (变种) 文件: J:\Tonger2003.zip/vipzz.exe
已隔离: 病毒 Heur.Invader (变种) 文件: J:\Tonger2003.zip/top.exe//PE_Patch//UPack
已隔离: 病毒 Heur.Trojan.Generic (变种) 文件: J:\Tonger2003.zip/vip.exe

卡巴 7.0.0.125 全部启发

显示全部楼层 · 发表于 2007-8-30 00:39:22

未被感染 (误报操作) （已发送供分析） J:\Tonger2003.zip/vipzz.exe 6.9 KB 2007-08-30 00:09:06

隔离上报，更新病毒库后扫描隔离，这个文件未被定为病毒。

但主动防御还是报风险软件。。。。。。

[ 本帖最后由浪滔天于 2007-8-30 00:43 编辑 ]

显示全部楼层 · 发表于 2007-8-30 00:43:33

显示全部楼层 · 发表于 2007-8-30 09:26:53

2007-8-30 9:26:25 Scanning Log
2007-8-30 9:26:25 Version of virus signature database: 2491 (20070830)
2007-8-30 9:26:25 Date: 30.8.2007 Time: 09:26:25
2007-8-30 9:26:25 Scanned disks, folders and files: F:\v\3.zip
2007-8-30 9:26:27 F:\v\3.zip » ZIP » vipzz.exe - probably unknown NewHeur_PE virus [7]
2007-8-30 9:26:27 F:\v\3.zip » ZIP » top.exe - is OK
2007-8-30 9:26:27 F:\v\3.zip » ZIP » vip.exe - probably a variant of Win32/Agent.NEO trojan
2007-8-30 9:26:27 Number of scanned files: 4
2007-8-30 9:26:27 Number of threats found: 2
2007-8-30 9:26:27 Time of completion: 09:26:27 Total scanning time: 2 sec (00:00:02)
2007-8-30 9:26:27
2007-8-30 9:26:27 Notes:
2007-8-30 9:26:27 [7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-8-30 09:27:52

Starting the file scan:

Begin scan in 'F:\病毒样本\Tonger2003.zip'
F:\病毒样本\Tonger2003.zip
  [0] Archive type: ZIP
  --> vipzz.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> top.exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.4081
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

[病毒样本] [MD5: FC509C 09A950 3DB74F]

本帖子中包含更多资源

本帖子中包含更多资源