NOD32 2.7监控和扫描竟然没发现的病毒

显示全部楼层 · 发表于 2007-11-2 17:27:55

这是个autorun类的病毒。我开起高级启发后扫描扫不出来。

显示全部楼层 · 发表于 2007-11-2 17:32:15

正常的，没有哪个杀软能100%检测出病毒

显示全部楼层 · 发表于 2007-11-2 17:40:18

文件名称 :    Data_2.dat
文件大小 :    237568 byte
文件类型 :    MS-DOS executable (EXE), OS/2 or MS Windows
MD5 :    d4eedee0dc17937d78153ffe5d5bcc30
SHA1 :    4139122d7ae9ef08ed4ffd20e347a999fdc87ca9

扫描结果扫描结果 :    20%的杀软(7/35)报告发现病毒
时间 :    2007/11/02 17:35:25 (CST)
软件名称引擎版本病毒库版本病毒库时间扫描结果时间
a-squared 3.0.0.126 2007.11.01 2007-11-01 - 2.909
AntiVir 7.6.0.30 7.0.0.163 2007-11-02 TR/Agent.237568 2.103
Arcavir 1.0.4 200711011218 2007-11-01 - 1.416
AVAST 1.0.8 071102-0 2007-11-02 - 3.155
AVG 7.5.49.442 269.15.14/1100 2007-10-30 - 2.511
BitDefender 7.60825.937367 7.15625 2007-11-02 Trojan.Adclicker.DN 3.456
CA (VET) 8.4.0.24 31.2.5262 2007-11-02 - 0.731
ClamAV 0.91.2 4659 2007-11-02 - 0.281
Comodo 2.11 2.0.0.332 2007-11-02 - 1.190
Dr.WEB 4.33 2007.11.02 2007-11-02 - 6.803
ewido 4.0.0.2 2007.11.01 2007-11-01 - 2.546
F-PROT 4.4.0.50 20071031 2007-10-31 - 1.877
F-SECURE 5.51.6100 2007.11.02.02 2007-11-02 - 4.051
IKARUS T3.1.1.12 2007.11.02.69754 2007-11-02 Trojan.Adclicker.DN 1.783
MKS_VIR 2.01 2007.11.02 2007-11-02 - 5.424
NOD32 2.70.10 2633 2007-11-02 - 0.102
NORMAN 5.91.08 5.90 2007-11-01 - 8.258
nProtect 2007-11-02.00 1018520 2007-11-02 Trojan.Adclicker.DN 8.272
Prevx V2 20071102 2007-11-02 - 16.834
QuickHeal 9.00 2007.11.01 2007-11-01 - 2.148
SOPHOS 2.49.1 4.21 2007-11-02 - 3.931
The Hacker 6.2.9 v00110 2007-10-26 - 0.624
VBA32 3.12.2.4 20071031.1752 2007-10-31 - 0.967
ViRobot 20071101 2007.11.01 2007-11-01 - 0.673
VirusBuster 4.3.19:9 9.113.8/11.0 2007-11-01 - 1.241
卡巴斯基 5.5.10 2007.11.02 2007-11-02 - 14.025
安博士V3 2007.11.02.00 2007.11.02 2007-11-02 Win-Trojan/Mnless.237568 1.339
江民杀毒 10.00.650 2007.11.01 2007-11-01 Trojan/Agent.cfr 1.612
熊猫卫士 9.04.03.0001 2007.11.01 2007-11-01 - 2.884
瑞星 19.0 20.16.40.00 2007-11-02 - 1.476
赛门铁克 1.3.0.24 20071101.016 2007-11-01 - 0.278
趋势 8.500-1001 4.810.03 2007-11-01 - 0.045
迈克菲 5.2.00 5154 2007-11-01 - 2.019
金山毒霸 2007.6.20.249 2007.11.2 2007-11-02 Win32.Troj.QQHook.ba.237568 1.524

显示全部楼层 · 发表于 2007-11-2 17:42:58

这个帖应该到病毒样本区吧

显示全部楼层 · 发表于 2007-11-2 18:02:17

都不是可执行文件，……

显示全部楼层 · 发表于 2007-11-2 18:06:38

Starting the file scan:

Begin scan in 'E:\qqrecord.rar'
E:\qqrecord.rar
  [0] Archive type: RAR
  --> QQRecord\coder\Data_2.dat
   [DETECTION] Is the Trojan horse TR/Agent.237568
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-2 18:09:32

C:\ABC\qqrecord\QQRecord\coder\Data_2.dat - 特征码 'Trojan.Adclicker.DN' 被发现

1 文件被扫描
(0 压缩档 0 文件)
1 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.016

显示全部楼层 · 发表于 2007-11-2 19:14:05

Begin scan in 'C:\Documents and Settings\Administrator\桌面\qqrecord.rar'
C:\Documents and Settings\Administrator\桌面\qqrecord.rar
  [0] Archive type: RAR
  --> QQRecord\coder\Data_2.dat
   [DETECTION] Is the Trojan horse TR/Agent.237568
   [WARNING] The file was ignored!

卡巴6飘过？！

显示全部楼层 · 发表于 2007-11-2 19:43:59

RX20.16.42不认为是病毒特征。

显示全部楼层 · 发表于 2007-11-3 09:16:56

Start of the scan: 2007年11月3日  09:16

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\qqrecord.rar
  [0] Archive type: RAR
  --> QQRecord\coder\Data_2.dat
   [DETECTION] Is the Trojan horse TR/Agent.237568
   [INFO]    The file was deleted!

End of the scan: 2007年11月3日  09:16
Used time: 00:12 min

The scan has been done completely.

   1 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

NOD32 2.7监控和扫描竟然没发现的病毒

本帖子中包含更多资源

浏览过的版块