过卡巴和NOD32的病毒

冷冷

SBie 跑了跑


[ 本帖最后由 冷_冷 于 2008-2-1 21:57 编辑 ]

wangjay1980

shang bao wan bi!

qigang

15/4


瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Banload.ase
病毒： Backdoor.Win32.AWQ.a     

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.29.42

Graybird

Starting the file scan:

Begin scan in 'E:\C.rar'
E:\C.rar
  [0] Archive type: RAR
  --> C\Program Files\WindowsUpdate\18.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> C\Program Files\WindowsUpdate\8.dll
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> C\WINDOWS\lsas.dll
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> C\WINDOWS\lsas.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [WARNING]   The file was ignored!

The file 'DISKCDRIVER.SYS' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

醉一生爱妍

运行之后释放--过主动.exe(这个估计是针对卡巴的 ）--

这个病毒还需要有脚本缩主运行的权限啊

[ 本帖最后由 garyyan456 于 2008-2-1 22:05 编辑 ]

star_xing

Virus or unwanted program 'TR/Dropper.Gen [TR/Dropper.Gen]'
detected in file 'C:\Documents and Settings\All Users\Application Data\Avira\Avira Premium Security Suite\TEMP\MAIL\TEMP\AVESVC30773056\AV$00000387.EXE.
Action performed: Deny access

醉一生爱妍

原帖由 455060250 于 2008-2-1 21:41 发表
费尔惨遭欺骗

不仅如此，还被释放出来的--过主动.EXE 被惨过动态防御！

leonfg

原帖由 冷_冷 于 2008-2-1 21:56 发表
SBie 跑了跑
194322194323

ESET 5
C:\Documents and Settings\GUNDAM\桌面\C.rar » RAR » C\Program Files\WindowsUpdate\1.bat - BAT/KillAV.EC trojan
C:\Documents and Settings\GUNDAM\桌面\C.rar » RAR » C\Program Files\WindowsUpdate\18.exe - probably a variant of Win32/BlackHole trojan
C:\Documents and Settings\GUNDAM\桌面\C.rar » RAR » C\Program Files\WindowsUpdate\8.dll - a variant of Win32/BlackHole trojan
C:\Documents and Settings\GUNDAM\桌面\C.rar » RAR » C\WINDOWS\lsas.dll - a variant of Win32/BlackHole trojan
C:\Documents and Settings\GUNDAM\桌面\C.rar » RAR » C\WINDOWS\lsas.exe - probably a variant of Win32/BlackHole trojan

傻猪猪米走鸡

2008-2-1 22:47:50        Kernel        File  'E:\virus\FlashUpdate.rar' was sent to ESET for analysis.

wolffshen

FS 2008-02-01_03没直接报，应该是沙盘报的， 上报