【90559b】antivir拦截脚本。挖

显示全部楼层 · 发表于 2007-10-1 10:52:21

发现一种新报法……HTML/Infected.Webpage.Gen

显示全部楼层 · 发表于 2007-10-1 10:56:41

TrustPort Antivirus On-Demand Scanner

   Status       Quarantined
   Target       G:\v\1.rar
                           Options
                                             , Requested action: Move to quarantine, Excluded extensions
                           disabled, Excluded objects disabled, Heuristics enabled, Sandbox enabled,
                           Scan archives

            Statistics       Details

                                                Files             Boot sectorsRegistry key

                           Scanned             3                      0                            0
                           Infected             1                      0                            0
                           Repaired             0                      0                            0
                           Renamed             0                      -                            -
                        Quarantined             1                      -                            -
                              Deleted             0                      -                            0

显示全部楼层 · 发表于 2007-10-1 10:59:36

最近小红伞又有疯了的趋势，我进入QQ游戏它也报脚本，貌似就有HTML/Infected.Webpage.Gen

显示全部楼层 · 发表于 2007-10-1 11:01:38

turstport在扫描的时候可以选择引擎吗

显示全部楼层 · 发表于 2007-10-1 11:01:44

想起前几天听一个人说NIS2008报脚本有多霸道，半信半疑着...

显示全部楼层 · 发表于 2007-10-1 11:06:18

卡巴

已检测到: 病毒 Packed.Win32.PolyCrypt.b URL: http://bbs.kafan.cn/attachment.php?aid=134180//1.exe

显示全部楼层 · 发表于 2007-10-1 11:06:19

[Found possible virus] <W32/Threat-HLLIN-Slipper-based!Maximus (not disinfectable)> C:\ABC\1.rar->1.exe
[Contains infected objects] C:\ABC\1.rar

显示全部楼层 · 发表于 2007-10-1 11:07:31

脚本引擎确实很让人郁闷，实际主要还是那群临时工写代码太不规范的原因。。

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\1.rar'
C:\Users\morgan\Documents\
  1.rar
[0] Archive type: RAR
--> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-1 11:09:12

Start of the scan: 2007年10月1日  11:08

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\1.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年10月1日  11:08
Used time: 00:16 min

The scan has been done completely.

   1 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-1 12:55:42

恶意程序名称:Packed.Win32.PolyCrypt.cv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1.EXE
是恶意程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] 【90559b】antivir拦截脚本。挖

本帖子中包含更多资源

本帖子中包含更多资源

回复 2楼 woai_jolin 的帖子

本帖子中包含更多资源

红伞报的!