e068e7，只能报壳！

显示全部楼层 · 发表于 2007-10-14 12:32:26

在办公室电脑上发现的，都引擎上报的都是壳

显示全部楼层 · 发表于 2007-10-14 12:33:34

C:\ABC\6.rar:\6.exe - 可疑代码段被发现 (Level: 125)

显示全部楼层 · 发表于 2007-10-14 12:35:05

DRWEB 4.44 MISS

显示全部楼层 · 发表于 2007-10-14 12:36:23

米动作

显示全部楼层 · 发表于 2007-10-14 12:56:14

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\6.rar'
C:\Users\morgan\Documents\
  6.rar
  6.rar:Zone.Identifier
[0] Archive type: RAR
--> 6.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-14 13:02:54

Start of the scan: Sunday, 14 October, 2007  13:02

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\6.rar'
C:\Documents and Settings\tim\桌面\6.rar
  [0] Archive type: RAR
  --> 6.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    A backup was created as '4783a321.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: Sunday, 14 October, 2007  13:02
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-14 13:25:04

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 533
Paranoia Database - 10451
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\6.exe

C:\Documents and Settings\uhthn\Desktop\6.exe - OK

1 Files scanned
0 Infected files found
0 Suspected files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-14 14:38:46

MS死了

显示全部楼层 · 发表于 2007-10-14 14:40:58

的确..

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.2
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\样本\6.exe 检测到 Packed.Unknown.c0e3
检测到了 1 个未知的恶意程序，请上报。
任务扫描完成。共耗费的时间：0-00-00 00:00:00:0020，共扫描的文件数量：1，共扫描到的威胁数量：1，威胁率：100%，扫描速率： 50 文件/秒，扫描速度： 5296.97 千字节/秒，共扫描了 105.94 千字节。

显示全部楼层 · 发表于 2007-10-14 14:53:15

卡巴不报

[病毒样本] e068e7，只能报壳！

本帖子中包含更多资源