挖jimmyleo的样本

显示全部楼层 · 发表于 2007-9-8 17:41:12

国外流氓

显示全部楼层 · 发表于 2007-9-8 17:42:21

显示全部楼层 · 发表于 2007-9-8 17:47:13

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Desktop.zip'
C:\Documents and Settings\Administrator\桌面\Desktop.zip
  [0] Archive type: ZIP
  --> iwt.exe
   [DETECTION] Is the Trojan horse TR/Agent.7168.90
  --> xpupdate.exe
   [DETECTION] Contains detection pattern of the dropper DR/Fakealert.AW.1
   [INFO]    The file was deleted!

End of the scan: 2007年9月8日  17:46
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   2 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-8 17:48:10

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Desktop.zip'
C:\Documents and Settings\Administrator\桌面\Desktop.zip
  [0] Archive type: ZIP
  --> iwt.exe
   [DETECTION] Is the Trojan horse TR/Agent.7168.90
  --> xpupdate.exe
   [DETECTION] Contains detection pattern of the dropper DR/Fakealert.AW.1

显示全部楼层 · 发表于 2007-9-8 18:11:44

显示全部楼层 · 发表于 2007-9-8 18:30:41

Scan performed at: 2007-9-8 18:30:21
Scanning Log
NOD32 version 2514 (20070908) NT
Command line: C:\Documents and Settings\Don johnson\桌面\Desktop.zip
Operating memory - is OK

Date: 8.9.2007 Time: 18:30:25
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\Desktop.zip
C:\Documents and Settings\Don johnson\桌面\Desktop.zip ?ZIP ?iwt.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\Desktop.zip ?ZIP ?xpupdate.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 18:30:25 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-9-8 19:25:49

上报咯

显示全部楼层 · 发表于 2007-9-8 21:17:11

detected: Trojan program Trojan-Downloader.Win32.Zlob.ceo File: C:\Documents and Settings\Owner\×ÀÃæ\Desktop.zip/iwt.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-9-8 21:38:03

显示全部楼层 · 发表于 2007-9-8 21:59:50

红伞还没来得及反应，Windows Defender就报了。

红伞的压缩监控未开，如开的话，下载都不允许了。

[ 本帖最后由 capsshift 于 2007-9-8 22:02 编辑 ]

[病毒样本] 挖jimmyleo的样本

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源