2支木马

显示全部楼层 · 发表于 2008-5-14 09:43:12

A-Squared	Found nothing
AntiVir	Found TR/Crypt.XPACK.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found SHeur.BJVA
BitDefender	Found Trojan.Crypt.AV
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Behav-204
VirusBuster	Found nothing
VBA32	Found nothing

创建时间文件名创建者
2008-05-14 09:36:36 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\PANDRV.SYS E:\5.EXE
2008-05-14 09:36:37 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\PANDRV.SYS.SYS E:\5.EXE
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SEICTRL\ IMAGEPATH C:\WINDOWS\SYSTEM32\RUNDLL32.EXE NVWRSASD.DLL,SCAN E:\5.EXE
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\KAVSYS\ IMAGEPATH \??\C:\WINDOWS\SYSTEM32\DRIVERS\VGA.SYS E:\1.COM

[ 本帖最后由 Nblock 于 2008-5-14 09:56 编辑 ]

显示全部楼层 · 发表于 2008-5-14 09:44:17

Starting the file scan:

Begin scan in 'E:\AV\样本.rar'
E:\AV\样本.rar
  [0] Archive type: RAR
  --> 5.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 1.com
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-14 09:44:25

IK 可以杀了
I:\virus\样本区\样本1.rar:\5.exe - Signature 'Trojan.Crypt.AV' found
I:\virus\样本区\样本1.rar:\1.com - Signature 'Virus.Win32.AuCrypt' found
I:\virus\样本区\样本1.rar

      3 Files scanned
      (1 Archiv with 2 files)
      2 Signatures found
      0 Suspect code-parts found
      Used time: 0:00.656

1.com 在沙盘不能运行
5.exe 要加载驱动偶不敢轻举妄动

[ 本帖最后由冷冷于 2008-5-14 09:46 编辑 ]

显示全部楼层 · 发表于 2008-5-14 09:51:05

显示全部楼层 · 发表于 2008-5-14 10:00:49

Date,Virus Name,Virus Type,User,Filename,Scan Type
2008-5-14 9:59:54,W32.Autorun.worm.bx.gen.dwut,病毒,Administrator,C:\Documents and Settings\Administrator\桌面\新建文件夹\1.com,Manual scan
2008-5-14 9:59:54,Trojan.Mbpscb.krbg,木马,Administrator,C:\Documents and Settings\Administrator\桌面\新建文件夹\5.exe,Manual scan

显示全部楼层 · 发表于 2008-5-14 10:51:28

微点还是不错啊

显示全部楼层 · 发表于 2008-5-14 10:57:08

卡巴报
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.afls 檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/1.com

上报一个

Hello.
No malicious software was found in the attached file.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Vyacheslav Zakorzhevsky
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-5-14 21:45 编辑 ]

显示全部楼层 · 发表于 2008-5-14 12:31:58

金山毒霸 0

显示全部楼层 · 发表于 2008-5-14 12:34:23

C:\Documents and Settings\Administrator\桌面\样本.rar>>1.com W32.Autorun.worm.bx.gen.dwut 病毒还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>5.exe Trojan.Mbpscb.krbg 木马还未处理

显示全部楼层 · 发表于 2008-5-14 13:36:23

扫描系统区域...
扫描所选择的目录和文件...
对象: 1.com
  在压缩档案里: F:\Virus\样本.rar
状态: 已发现病毒
  病毒: Trojan-PSW.Win32.OnLineGames.afls (AVP引擎)
对象: 样本.rar
路径: F:\Virus
状态: 已发现病毒
  病毒: Trojan-PSW.Win32.OnLineGames.afls (AVP引擎)
分析完成: 2008-5-14 13:39
已扫描 1 个文件
已发现 1 个感染文件
发现 0 个可疑文件

[病毒样本] 2支木马

本帖子中包含更多资源

本帖子中包含更多资源