c8d163，卡巴报壳！

显示全部楼层 · 发表于 2007-10-1 10:40:19

[Clean] C:\ABC\virus\virus.com->(UPX)
[Clean] C:\ABC\virus\virus.com->(RAR)->aq016.exe->(UPX)
[Clean] C:\ABC\virus\virus.com->(RAR)->aq016.exe->(RAR)->aq016.jpg
[Clean] C:\ABC\virus\virus.com->(RAR)->aq016.exe->(RAR)
[Clean] C:\ABC\virus\virus.com->(RAR)->aq016.exe
[Found possible virus] <W32/PWStealer3!Generic (not disinfectable)> C:\ABC\virus\virus.com->(RAR)->16.exe
[Contains infected objects] C:\ABC\virus\virus.com

C:\ABC\virus\virus.com:\aq016.exe
C:\ABC\virus\virus.com:\16.exe - 可疑代码段被发现 (Level: 125)
C:\ABC\virus\virus.com

显示全部楼层 · 发表于 2007-10-1 10:41:11

怎么NOD32显无毒

显示全部楼层 · 发表于 2007-10-1 11:04:45

瑞星08主动防御干掉

显示全部楼层 · 发表于 2007-10-1 11:05:53

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\virus.rar'
C:\Users\morgan\Documents\
  virus.rar
[0] Archive type: RAR
--> virus.com
      [1] Archive type: RAR SFX (self extracting)
      --> aq016.exe
      [2] Archive type: RAR SFX (self extracting)
      --> aq016.jpg
      --> 16.exe
         [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
         [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-1 11:05:55

难道是新闻

deleted: virus Packed.Win32.NSAnti.r File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/virus.com/16.exe

显示全部楼层 · 发表于 2007-10-1 11:13:06

Start of the scan: 2007年10月1日  11:12

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\virus.rar
  [0] Archive type: RAR
--> virus.com
   [1] Archive type: RAR SFX (self extracting)
   --> 16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年10月1日  11:12
Used time: 00:09 min

The scan has been done completely.

   1 Scanning directories
   5 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   3 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-1 12:42:29

卡巴7.0杀猪声响起，报如图。

显示全部楼层 · 发表于 2007-10-1 12:47:55

又是这个，微点挂掉

显示全部楼层 · 发表于 2007-10-1 14:19:41

CA  Win32/NSAnti trojan
nProtect  Trojan-Dropper/W32.Agent.79804
Panda  Suspicious file
Authentium  Possibly a new variant of W32/PWStealer3!Generic
eSafe  Win32.NSAnti.r
Antivir  DR/Agent.afh
Kaspersky  Packed.Win32.NSAnti.r
Ikarus  MalwareScope.Worm.Viking.3
F-Secure  Packed.Win32.NSAnti.r
F-Prot  W32/PWStealer3!Generic
VBA32  MalwareScope.Worm.Viking.3
Sophos  Mal/EncPk-AZ
Webwasher-Gateway  Trojan.Crypt.NSPM.Gen
Arcavir  Trojan.Psw.Onlinegames.Aw
Fortinet  Suspicious

Compressed: YES

[ GNR info ]
* Decompressing UPX.
* Creating several executable files on hard-drive.

[ Changes to filesystem ]
* Creates directory C:.
* Creates directory C:\WINDOWS.
* Creates directory C:\WINDOWS\TEMP.
* Creates directory C:\WINDOWS\TEMP\RarSFX0.
* Creates file C:\WINDOWS\TEMP\RarSFX0\aq016.exe.
* Creates file C:\WINDOWS\TEMP\RarSFX0\16.exe.
* Deletes file C:\WINDOWS\TEMP\RarSFX0.
* Creates file C:\WINDOWS\TEMP\RarSFX0\aq016.jpg.

[病毒样本] c8d163，卡巴报壳！

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块