睡覺時間，UNKONOW病毒的樣本

醉一生爱妍

NOD IS ALL KILL

冷冷

原帖由 garyyan456 于 2008-1-25 22:49 发表
NOD IS ALL KILL

语法错误
正确： NOD KILLS ALL！！
----------------------------------------------------------

I:\virus\test\svstem.com:\inst.exe - Suspect code-parts found (Level: 55)
I:\virus\test\svstem.com:\MyPicture.exe - Signature 'Win32.SuspectCrc' found
I:\virus\test\Program Files\inst.exe - Suspect code-parts found (Level: 55)
I:\virus\test\Program Files\MyPicture.exe - Signature 'Win32.SuspectCrc' found

15 Files scanned
   (1 Archiv with 6 files)
2 Signatures found
2 Suspect code-parts found
Used time: 0:04.984

[ 本帖最后由 冷_冷 于 2008-1-25 23:02 编辑 ]

醉一生爱妍

。。。。。。。額

傻猪猪米走鸡

lz , that is a gm!

鱼是一只我

江民 kills none～～～

Kitman

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\svstem.rar'
C:\Documents and Settings\Administrator\桌面\svstem.rar
  [0] Archive type: RAR
  --> svstem.com
      [DETECTION] Contains detection pattern of the dropper DR/PSW.Magania.dpl
      [1] Archive type: RAR SFX (self extracting)
      --> inst.exe
          [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '480cfde9.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\Program Files.rar'
C:\Documents and Settings\Administrator\桌面\Program Files.rar
  [0] Archive type: RAR
  --> Program Files\inst.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '4808fde5.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

浪滔天

卡巴

已删除: 木马程序 Trojan-PSW.Win32.Magania.dpl        文件: F:\病毒样本\Program Files.rar/Program Files\inst.exe
已删除: 木马程序 Trojan-PSW.Win32.Magania.dpl        文件: F:\病毒样本\svstem.rar/svstem.com//data.rar/inst.exe

llgiggs

原帖由 鱼是一只我 于 2008-1-25 23:04 发表
江民 kills none～～～

Avira Antivir PersonalEdition Class, waiting to see the result which shows the fact that how many virus can be checked out. 語法大賽

And the result, it kiils 2
-----------------------------------------------------------------------------------


Begin scan in 'C:\Documents and Settings\Administrator\桌面\svstem.rar'
C:\Documents and Settings\Administrator\桌面\svstem.rar
  [0] Archive type: RAR
    --> svstem.com
      [1] Archive type: RAR SFX (self extracting)
      --> inst.exe
          [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '480cfe66.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
------------------------------------------------------------------------------------------------

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Program_Files.rar'
C:\Documents and Settings\Administrator\桌面\Program_Files.rar
  [0] Archive type: RAR
  --> Program Files\inst.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '4808feb4.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

[ 本帖最后由 llgiggs 于 2008-1-25 23:20 编辑 ]

qigang

rising20.28.50一个未杀，查到23个文件！

yitp

S版拒绝下载