一个毒和衍生物

显示全部楼层 · 发表于 2007-9-6 12:35:31

文件: C:\Documents and Settings\moonsilver\桌面\g0ld.com
大小: 384625 字节
修改时间: 2007年9月6日, 12:32:23
MD5: 875174D31294B19E045F2BBF93F5C855
SHA1: 26E9A4AD6655ACC1F80FF7FE81875253D8EEB018
CRC32: 6648DD68
文件: C:\Documents and Settings\moonsilver\桌面\ReaPlayer.com.cn.ini
大小: 384625 字节
修改时间: 2007年9月6日, 12:31:17
MD5: 875174D31294B19E045F2BBF93F5C855
SHA1: 26E9A4AD6655ACC1F80FF7FE81875253D8EEB018
CRC32: 6648DD68
文件: C:\Documents and Settings\moonsilver\桌面\SVKP.sys
大小: 2368 字节
文件版本: 4.00
修改时间: 2007年9月6日, 12:32:14
MD5: F05028B163B92C302A74409D683AC9B0
SHA1: 74A943B9F3BF63F8DE5C3175F96366B24A661067
CRC32: 3002EDDA

显示全部楼层 · 发表于 2007-9-6 12:40:11

开了antivir的压缩包监控真头疼。。。
下个样本点n次。。

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\1.rar'
C:\Documents and Settings\Administrator\My Documents\
  1.rar
[0] Archive type: RAR
--> ReaPlayer.com.cn.ini
      [DETECTION] Is the Trojan horse TR/PCK.PolyCrypt.B.1141
      [WARNING] Infected files in archives cannot be repaired!
--> SVKP.sys
--> g0ld.com
      [DETECTION] Is the Trojan horse TR/PCK.PolyCrypt.B.1141
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

End of the scan: 2007年9月5日  21:39
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   2 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   2 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-6 12:49:50

发过

显示全部楼层 · 发表于 2007-9-6 12:51:42

http://bbs.kafan.cn/viewthread.php?tid=127046&extra=page%3D1
就是这个里面的

显示全部楼层 · 发表于 2007-9-6 12:53:39

发的真快啊

[病毒样本] 一个毒和衍生物

本帖子中包含更多资源

回复 3楼 wangjay1980 的帖子

浏览过的版块