一个毒网被红伞抓的！在线扫描过NOD32

显示全部楼层 · 发表于 2008-1-11 22:39:33

微点报联网动作

显示全部楼层 · 发表于 2008-1-11 22:39:58

过大蜘蛛
[MD5: D6C105 D41D8C AEC37D EF7759]衍生物

显示全部楼层 · 发表于 2008-1-11 22:42:39

检测到病毒: Trojan-PSW.Win32.OnLineGames.noi
文件: U[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9VZNXXGE
进程: Maxthon.exe

显示全部楼层 · 发表于 2008-1-11 23:52:05

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\��1.rar'
C:\Documents and Settings\Administrator\My Documents\
  ��1.rar
[0] Archive type: RAR
--> tmp72.tmp
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> phy.sys
      [DETECTION] Is the Trojan horse TR/Dldr.Apher.X
      [WARNING] Infected files in archives cannot be repaired!
--> ~wupcai
   [INFO]    The file was deleted!

End of the scan: 2008年1月11日  07:52
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   1 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   2 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-12 00:48:06

2008-1-12 0:28:37 Kernel File 'F:\virus\样本1\phy.sys' was sent to ESET for analysis.
2008-1-12 0:28:29 Kernel File 'F:\virus\样本1\~wupcai' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-1-12 01:51:00

加了层马甲，运行的释放物nod咔嚓了

显示全部楼层 · 发表于 2008-1-12 06:27:04

avast!过了~

显示全部楼层 · 发表于 2008-2-19 10:34:58

Scan Log
Version of virus signature database: 2884 (20080218)
Date: 2008-2-19 Time: 10:34:31
Scanned disks, folders and files: E:\virus\U.rar
E:\virus\U.rar » RAR » U.exe - Win32/TrojanDownloader.Small.NZL trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 10:34:33 Total scanning time: 2 sec (00:00:02)

显示全部楼层 · 发表于 2008-2-19 10:42:53

Starting the file scan:

Begin scan in 'E:\Antivir\��1.rar'
E:\Antivir\��1.rar
  [0] Archive type: RAR
  --> tmp72.tmp
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.nzp.1
  --> phy.sys
   [DETECTION] Is the Trojan horse TR/Dldr.Apher.X
   [INFO]    The file was deleted!

The file 'tmp73.tmp' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file '~wupcai' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

[病毒样本] 一个毒网被红伞抓的！在线扫描过NOD32

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 3楼冷_冷的帖子

[病毒样本] 一个毒网被红伞抓的！在线扫描过NOD32

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 3楼 冷_冷 的帖子

回复 3楼冷_冷的帖子