3个

显示全部楼层 · 发表于 2008-2-24 04:07:41

扫扫看

[ 本帖最后由绅博周幸于 2008-2-24 04:39 编辑 ]

显示全部楼层 · 发表于 2008-2-24 04:09:17

顺便说一下, 卡6也是全军覆没, 卡7靠启发扫到2个

显示全部楼层 · 发表于 2008-2-24 04:19:04

FS结果: 找到 1 恶意软件，启发的，其他的看一下沙盘能不能挡住
Type_Win32 (病毒)
D:\Virus\Test\3.exe 操作: 删除

显示全部楼层 · 发表于 2008-2-24 04:21:30

其他的杀软查杀率也不是很高

显示全部楼层 · 发表于 2008-2-24 04:23:03

1.exe挡住，6.exe挡住，其他几个都没跑起来，9.exe好像是缺少另1个调用文件，其他有些文件可能是坏的

[ 本帖最后由 wolffshen 于 2008-2-24 04:29 编辑 ]

显示全部楼层 · 发表于 2008-2-24 04:40:02

皇帝报9.exe是鸽子

，红伞的启发还是一如既往的强悍，x星居然有报，难道真是国产病毒？
反病毒引擎版本最后更新扫描结果
AhnLab-V3 2008.2.22.0 2008.02.22 -
AntiVir 7.6.0.67 2008.02.22 HEUR/Crypted
Authentium 4.93.8 2008.02.23 -
Avast 4.7.1098.0 2008.02.22 -
AVG 7.5.0.516 2008.02.22 -
BitDefender 7.2 2008.02.23 -
CAT-QuickHeal 9.50 2008.02.22 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.02.23 -
DrWeb 4.44.0.09170 2008.02.23 -
eSafe 7.0.15.0 2008.02.21 Suspicious File
eTrust-Vet 31.3.5557 2008.02.23 -
Ewido 4.0 2008.02.23 -
FileAdvisor 1 2008.02.23 -
Fortinet 3.14.0.0 2008.02.23 -
F-Prot 4.4.2.54 2008.02.22 -
F-Secure 6.70.13260.0 2008.02.22 -
Ikarus T3.1.1.20 2008.02.23 Backdoor.Win32.Hupigon.mrv
Kaspersky 7.0.0.125 2008.02.23 -
McAfee 5236 2008.02.22 New Malware.dq
Microsoft 1.3204 2008.02.23 -
NOD32v2 2898 2008.02.23 -
Norman 5.80.02 2008.02.22 -
Panda 9.0.0.4 2008.02.23 Suspicious file
Prevx1 V2 2008.02.23 -
Rising 20.32.52.00 2008.02.23 Trojan.Win32.VB.ype
Sophos 4.26.0 2008.02.23 -
Sunbelt 3.0.893.0 2008.02.23 -
Symantec 10 2008.02.23 -
TheHacker 6.2.9.228 2008.02.23 -
VBA32 3.12.6.1 2008.02.21 -
VirusBuster 4.3.26:9 2008.02.23 -
Webwasher-Gateway 6.6.2 2008.02.23 Heuristic.Crypted

显示全部楼层 · 发表于 2008-2-24 04:45:19

原帖由 wolffshen 于 2008-2-24 04:40 发表
皇帝报9.exe是鸽子，红伞的启发还是一如既往的强悍，x星居然有报，难道真是国产病毒？
反病毒引擎       版本       最后更新       扫描结果
AhnLab-V3       2008.2.22.0       2008.02.22       -
AntiVir       7.6.0.67       2008.02.22       HEUR/C ...

暂时把你测试认为无效的文件撤下，9个已经上报卡巴，等回复后在进行调整

显示全部楼层 · 发表于 2008-2-24 04:47:09

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\Downloads.rar'
C:\Documents and Settings\Administrator\My Documents\
  Downloads.rar
[0] Archive type: RAR
--> 6.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 1.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> 3.exe
   [WARNING] The file was ignored!
  Downloads.rar:Zone.Identifier

End of the scan: 2008年2月23日  12:46
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   5 Files were scanned
   1 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   1 Archives were scanned
   3 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-24 04:47:45

原帖由 绅博周幸 于 2008-2-24 04:45 发表

暂时把你测试认为无效的文件撤下，9个已经上报卡巴，等回复后在进行调整

不一定无效，可能是SBie里没能跑起来，另外确认了下，4.exe是被FS的系统控制拦下了，呵呵

还是卡巴回复快，周六FS都不更新病毒库的

[ 本帖最后由 wolffshen 于 2008-2-24 04:51 编辑 ]

显示全部楼层 · 发表于 2008-2-24 08:38:56

卡巴全了。。
deleted: Trojan program Trojan-Downloader.Win32.Delf.dqu File: C:\Documents and Settings\Administrator\×ÀÃæ\Downloads.rar/6.exe//#
detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Administrator\×ÀÃæ\Downloads.rar/1.exe
detected: virus Type_Win32 (modification) File: C:\Documents and Settings\Administrator\×ÀÃæ\Downloads.rar/3.exe

[病毒样本] 3个

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块