[病毒样本] 1

显示全部楼层 · 发表于 2008-1-22 23:37:19

卡巴不报，上报

显示全部楼层 · 发表于 2008-1-22 23:38:40

pass

在system32 释放了这些东西！
[MD5: 1D288E A8B81F D456C3 1D1A2E EC6359 4E2D6D 2A3DCC D6AEA0] 都【PASS】

-------------------------------------------------------------------------------
根据楼下的地址找到了 [MD5: FE1434]

-------------------------------------------------------------------------------
I:\virus\test/614.exe: PUA.Packed.UPack-2 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 194939
Engine version: 0.92
Scanned directories: 1
Scanned files: 2
Infected files: 1
Data scanned: 0.01 MB
Time: 6.734 sec (0 m 6 s)

[ 本帖最后由冷_冷于 2008-1-22 23:47 编辑 ]

显示全部楼层 · 发表于 2008-1-22 23:40:25

这个就不用报了
<html>
<head>
<title>卡巴斯基反病毒6.0</title>
</head>
<body>
<h1>卡巴斯基反病毒6.0</h1>
<p>The requested URL <u>http://down.malasc.cn/614.exe</u> is forbidden</p>
</body>
</html>

显示全部楼层 · 发表于 2008-1-22 23:47:40

感谢你提供线索

显示全部楼层 · 发表于 2008-1-22 23:56:51

江民只报614.exe为盗号木马… 其他都不报
其他的文件貌似不是bat就是DOS程序…

显示全部楼层 · 发表于 2008-1-22 23:57:30

NOD报了最后一个……

显示全部楼层 · 发表于 2008-1-23 00:00:36

小红伞不报（已开高启发0

显示全部楼层 · 发表于 2008-1-23 00:12:30

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\SAMPLE-2.rar'
C:\Documents and Settings\Administrator\My Documents\
  SAMPLE-2.rar
[0] Archive type: RAR
--> COMMAND.COM
--> KB16.COM
--> scs20A.tmp
--> DOSX.EXE
--> MSCDEXNT.EXE
--> scs209.tmp
--> HIMEM.SYS
--> REDIR.EXE
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\SAMPLE-3.rar'
C:\Documents and Settings\Administrator\My Documents\
  SAMPLE-3.rar
[0] Archive type: RAR
--> 614.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ode
      [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\101.rar'
C:\Documents and Settings\Administrator\My Documents\
  101.rar
[0] Archive type: RAR
--> 101.com

End of the scan: 2008年1月22日  08:12
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   13 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   12 Files not concerned
   3 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-23 01:56:12

费尔不报·····

显示全部楼层 · 发表于 2008-1-23 20:32:04

第二包

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.OnlineGames.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.22

第一包未杀！

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源

回复 3楼 wangjay1980 的帖子

回复 2楼冷_冷的帖子

浏览过的版块

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源

回复 3楼 wangjay1980 的帖子

回复 2楼 冷_冷 的帖子

浏览过的版块

回复 2楼冷_冷的帖子