mp pass

显示全部楼层 · 发表于 2007-12-16 12:01:32

Starting the file scan:

Begin scan in 'E:\Virus\nncc1.rar'
E:\Virus\nncc1.rar
  [0] Archive type: RAR
  --> nncc1.exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-12-16 12:02:41

好奇怪的报发

显示全部楼层 · 发表于 2007-12-16 12:05:35

大蜘蛛报了

nncc1.exe\data001;C:\Documents and Settings\77\My Documents\nncc1.rar\nncc1.exe;Win32.HLLW.Rubbish;;
nncc1.exe;C:\Documents and Settings\77\My Documents\nncc1.rar;发现档案文件中有受感染的对象;;
nncc1.rar;C:\Documents and Settings\77\My Documents;发现档案文件中有受感染的对象;;

显示全部楼层 · 发表于 2007-12-16 12:10:30

Start of the scan: 2007年12月16日  12:09

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\nncc1.rar'
C:\Documents and Settings\Administrator\桌面\nncc1.rar
  [0] Archive type: RAR
  --> nncc1.exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
   [INFO]    A backup was created as '47c7a57f.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: 2007年12月16日  12:09
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-16 12:11:51

AVAST报
D:\Downloads\样本\nncc1.rar\nncc1.exe\[Embedded#0a644]\[Upack]\[Embedded#03008]\[Embedded#08008]
Win32:Downloader-RR [Wrm]

显示全部楼层 · 发表于 2007-12-16 12:12:26

原帖由 ykz1991 于 2007-12-16 12:02 发表
好奇怪的报发

这个就是纯粹的报壳了……

显示全部楼层 · 发表于 2007-12-16 12:40:35

郁闷哦，中毒了，每个盘都有这个病毒文件，文件扩展名也不能显示了

微点主动防御软件试用版
程序版本： 1.2.10571.0168
特征版本： 1.6.533.071215
更新时间： 2007-12-15 17:08:37

版权所有 (C) 2005-2007 Micropoint Corporation

北京东方微点信息技术有限责任公司
福建东方微点信息安全有限责任公司

信箱：support@micropoint.com.cn
网址：http://www.micropoint.com.cn

显示全部楼层 · 发表于 2007-12-16 12:43:09

发现病毒: MemScan:Backdoor.Agent.ZAG

下载网页内容时, 发现病毒.

地址: bbs.kafan.cn

显示全部楼层 · 发表于 2007-12-16 12:43:43

用微点，最好不要实机测试……

[病毒样本] mp pass

本帖子中包含更多资源

回复 2楼 Graybird 的帖子

回复 8楼 moonsilver 的帖子

浏览过的版块