老毒巢挖出来的新东西06dcf9

显示全部楼层 · 发表于 2007-9-9 18:07:34

a-squared	3.0.0.123	2007.09.06	2007-09-06	-	11.602
Arcavir	1.0.4	200709081003	2007-09-08	-	1.251
AVAST	1.0.8	000773-3	2007-09-08	-	3.043
AVG	7.5.48.442	269.13.7/992	2007-09-06	-	1.611
BitDefender	7.60825.871824	7.14685	2007-09-09	DeepScan:Generic.PWS.Games.1.28530EE8	3.200
CA (VET)	8.4.0.24	31.1.5119	2007-09-08	-	0.823
ClamAV	0.91.1	4205	2007-09-09	-	0.267
Comodo	2.11	2.0.0.279	2007-09-09	-	1.090
ewido	4.0.0.2	2007.09.08	2007-09-08	-	2.060
F-SECURE	5.51.6100	2007.09.09.01	2007-09-09	-	2.817
Hauri	20070907	2007.09.07	2007-09-07	-	0.559
IKARUS	T3.1.1.12	2007.09.09.69473	2007-09-09	-	1.359
MKS_VIR	2.01	2007.09.08	2007-09-08	-	4.065
NOD32	2.70.8	2515	2007-09-09	-	0.054
nProtect	2007-09-07.00	909334	2007-09-07	-	11.230
QuickHeal	9.00	2007.09.08	2007-09-08	-	2.300
SOPHOS	2.49.1	4.21	2007-09-09	-	2.654
The Hacker	6.1.10	v00182	2007-09-08	-	0.708
VBA32	3.12.2.4	20070908.0321	2007-09-08	-	0.688
VirusBuster	4.3.19:9	9.103.2/11.0	2007-09-08	-	1.103
冰岛杀毒	3.16.16	2007.09.07	2007-09-07	-	0.473
卡巴斯基	5.5.10	2007.09.09	2007-09-09	-	0.077
大蜘蛛	4.33	2007.09.08	2007-09-08	-	4.869
小红伞	7.6.0.5	6.39.1.106	2007-09-08	HEUR/Malware	2.369
江民杀毒	10.00.650	2007.09.08	2007-09-08	-	0.807
熊猫卫士	9.04.03.0001	2007.09.08	2007-09-08	Suspicious file	3.499
瑞星	19.0	19.39.62.00	2007-09-09	-	1.613
诺曼	5.91.07	5.90	2007-09-07	-	3.188
赛门铁克	1.3.0.24	20070908.008	2007-09-08	-	0.444
趋势	8.500-1001	4.705.00	2007-09-07	-	0.076
迈克菲	5.2.00	5115	2007-09-07	-	1.169
金山毒霸	2007.6.20.249	2007.9.8	2007-09-08	-	0.915

显示全部楼层 · 发表于 2007-9-9 18:09:28

SB组件又调用失败了

显示全部楼层 · 发表于 2007-9-9 18:44:48

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-9-8
开始时间: 2007-9-9 18:49
引擎: KAV 引擎 (AVK 16.10153), BD 引擎 (BD 16.6079)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: 10(1).exe
在压缩档案里: C:\Documents and Settings\Administrator\桌面\10(1).rar
Status: 已发现病毒
病毒: DeepScan:Generic.PWS.Games.1.28530EE8 (BD 引擎)
对象: 10(1).rar
路径: C:\Documents and Settings\Administrator\桌面
Status: 已发现病毒
病毒: DeepScan:Generic.PWS.Games.1.28530EE8 (BD 引擎)
扫描完成: 2007-9-9 18:49
已检查 1 个文件
已发现 1 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2007-9-9 19:18:16

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description DeepScan:Generic.PWS.Games.1.28530EE8
Error code: -1602
Requested URL: /attachment.php?aid=125696
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-9 19:40:25

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3961
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\10(1).exe

C:\Documents and Settings\uhthn\Desktop\10(1).exe - Suspicious of Trojan-Downloader.Small.2

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-9 19:49:36

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\INTELX86.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\INTELX86.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-9 20:33:40

残忍而迅速的过小A

显示全部楼层 · 发表于 2007-9-9 20:51:05

飘过

显示全部楼层 · 发表于 2007-9-9 21:59:15

两款均不报

显示全部楼层 · 发表于 2007-9-9 22:50:35

Starting the file scan:

Begin scan in 'C:\Documents and Settings\ssy\桌面\10(1).rar'
C:\Documents and Settings\ssy\桌面\10(1).rar
  [0] Archive type: RAR
  --> 10(1).exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

[病毒样本] 老毒巢挖出来的新东西06dcf9

本帖子中包含更多资源