新样本来了

显示全部楼层 · 发表于 2007-9-8 18:25:07

大家扫扫看

显示全部楼层 · 发表于 2007-9-8 18:26:59

MP

[ 本帖最后由 soft_killer 于 2007-9-8 18:28 编辑 ]

显示全部楼层 · 发表于 2007-9-8 18:28:19

费尔过了。。

显示全部楼层 · 发表于 2007-9-8 18:29:05

Scan performed at: 2007-9-8 18:28:38
Scanning Log
NOD32 version 2514 (20070908) NT
Command line: C:\Documents and Settings\Don johnson\桌面\`病毒样本.rar
Operating memory - is OK

Date: 8.9.2007 Time: 18:28:42
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\`病毒样本.rar
C:\Documents and Settings\Don johnson\桌面\`病毒样本.rar ?RAR ?SYS140.EXE - a variant of Win32/PSW.Delf.NIY trojan
C:\Documents and Settings\Don johnson\桌面\`病毒样本.rar ?RAR ?WTZLNX.EXE - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\`病毒样本.rar ?RAR ?DISKMAN32.EXE - a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 22
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 18:28:42 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-8 18:33:25

小红伞

Virus or unwanted program 'TR/PSW.Steal.26776 [TR/PSW.Steal.26776]'
detected in file 'F:\Temporary Internet Files\Content.IE5\CXU1G1QD\`病毒样本[1].rar.
Action performed: Delete file

显示全部楼层 · 发表于 2007-9-8 18:34:50

其余没问题
C:\ABC\`病毒样本\DISKMAN32.EXE - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\`病毒样本\PLYR_ERR.CHW
C:\ABC\`病毒样本\QQEDIT.DLL
C:\ABC\`病毒样本\SYS140.EXE - 特征码 'Generic.PWStealer' 被发现
C:\ABC\`病毒样本\WTZLNX.EXE - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\`病毒样本\`.exe
C:\ABC\`病毒样本\~DF3778.TMP
C:\ABC\`病毒样本\~DF5DC5.TMP
C:\ABC\`病毒样本\~DF8EAC.TMP

9 文件被扫描
(0 压缩档 0 文件)
3 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.219

显示全部楼层 · 发表于 2007-9-8 18:37:42

怎么IK和nod32扫的文件差这么多

显示全部楼层 · 发表于 2007-9-8 18:44:36

剩下的都是没问题的东西

显示全部楼层 · 发表于 2007-9-8 19:08:29

已检测到: 病毒 Heur.Downloader (变种) URL: http://bbs.kafan.cn/attachment.php?aid=125325//SYS140.EXE

卡巴 7.0.0.125 启发

显示全部楼层 · 发表于 2007-9-8 19:17:05

5楼的开高启发了没？
我的红伞报的和你不一样

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\`病毒样本.rar'
C:\Documents and Settings\Administrator\桌面\`病毒样本.rar
  [0] Archive type: RAR
  --> SYS140.EXE
   [DETECTION] Is the Trojan horse TR/PSW.Steal.26776
  --> WTZLNX.EXE
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> DISKMAN32.EXE
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was moved to 'b2b4fa3e.qua'!

End of the scan: 2007年9月8日  19:16
Used time: 00:09 min

The scan has been done completely.

   0 Scanning directories
   17 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   14 Files not concerned
   2 Archives were scanned
   0 Warnings
   0 Notes

[病毒样本] 新样本来了

本帖子中包含更多资源

本帖子中包含更多资源

回复 6楼 promised 的帖子

回复 7楼 EQ2 的帖子