12
返回列表 发新帖
楼主: tonger2003
收起左侧

[病毒样本] one

[复制链接]
killloop
发表于 2008-2-14 23:49:53 | 显示全部楼层
江民 0
jmlovefj
发表于 2008-2-14 23:58:31 | 显示全部楼层
瑞星直接过~~~~
gho
发表于 2008-2-15 00:12:38 | 显示全部楼层
FS和ESS都报,就是FS处理太慢
woai_jolin
发表于 2008-2-15 00:15:50 | 显示全部楼层
===================================================================================================
On-demand scanner 7.0.0.10
NSE revision 5.91.10
nvcbin.def revision 5.90.00 of 2008/02/13 18:03:03 (1304206 variants)
nvcmacro.def revision 5.90.00 of 2008/02/04 16:47:24 (20430 variants)
Total number of variants: 1324636
===================================================================================================

*** Possible virus found ***
*** G:\v\k.exe -> Worm SDBot.gen10 ()
- File G:\v\k.exe quarantined.
- File G:\v\k.exe deleted.
===================================================================================================
The scanning started: 2008/02/15 00:14:07
               ended: 2008/02/15 00:14:07
Logged on as        : Administrator
on hostname         : 0AB2B4C883ED4CF
Scanning results:
   Total number of files found..............................:       1
   Number of files scanned..................................:       1
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       0
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       1
Copyright (c) 1993-2007 Norman ASA.
Joker
发表于 2008-2-15 08:52:19 | 显示全部楼层
The requested object is INFECTED. The following viruses Worm.Win32.AutoRun.cnv were found
wangjay1980
发表于 2008-2-15 10:10:31 | 显示全部楼层
detected: virus Worm.Win32.AutoRun.cnv        URL: http://bbs.kafan.cn/attachment.php?aid=200862//k.exe
spatra
发表于 2008-2-15 10:35:33 | 显示全部楼层
程序:
C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\USER\CURRENT\桌面\K.EXE
木马程序生成以下文件:
1) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\DRIVERS\SVCHOST.EXE
2) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\MICROSOFT.EXE
3) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\SP00LV.EXE
4) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\SETUP.EXE
是否删除木马程序及其衍生物?

在沙盘中启动了服务微点才报,是不是有点迟呢
qigang
发表于 2008-2-15 21:50:16 | 显示全部楼层

2/0

rising20.31.30不杀!
Palkia
发表于 2008-2-15 22:43:17 | 显示全部楼层
C:\Documents and Settings\Administrator\桌面\1.rar>>Content.IE5\UE18RTR4\014[1].exe        TrojanDownloader.Nurech.bd.bmqk        木马        还未处理
挪威的冬天
发表于 2008-2-15 23:30:10 | 显示全部楼层
金山 MISS
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-29 13:43 , Processed in 0.089034 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表