请高手测试是否是病毒

显示全部楼层 · 发表于 2008-5-27 17:50:57

请高手测试测试

显示全部楼层 · 发表于 2008-5-27 18:07:34

红伞飘。

显示全部楼层 · 发表于 2008-5-27 18:32:09

病毒

在windwos目录下生产Nt_File_Temp连接网络下载*.bmp 并运行

分析完毕

显示全部楼层 · 发表于 2008-5-27 18:36:23

http://bbs.kafan.cn/viewthread.php?tid=258257&extra=page%3D1

下载者[:26:]

显示全部楼层 · 发表于 2008-5-27 18:38:03

Starting the file scan:

Begin scan in 'E:\AV\Nt_File_Temp'
E:\AV\Nt_File_Temp\0.bmp
   [DETECTION] Is the Trojan horse TR/Agent.nbl
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\1.bmp
   [DETECTION] Is the Trojan horse TR/Agent.nbj
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\2.bmp
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\3.bmp
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\4.bmp
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\5.bmp
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajnn
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\6.bmp
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\7.bmp
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\Nt_File_Temp\8.bmp
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!

End of the scan: 2008年5月27日  18:40
Used time: 00:20 min

The scan has been done completely.

   1 Scanning directories
   10 Files were scanned
   10 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   9 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   9 Notes

The file 'list.bmp' has been determined to be 'CLEAN'.

[ 本帖最后由 Exia 于 2008-5-27 19:18 编辑 ]

显示全部楼层 · 发表于 2008-5-27 19:29:35

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Nt_File_Temp.rar->Nt_File_Temp\2.bmp->(embedded)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Nt_File_Temp.rar->Nt_File_Temp\5.bmp
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Nt_File_Temp.rar->Nt_File_Temp\7.bmp->(embedded)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Nt_File_Temp.rar->Nt_File_Temp\8.bmp->(embedded)

---------------------------------------------------------------------
Scan ended: 2008-5-27, 19:29:19
Duration: 0:00:03

Scan result:

Scanned files:    6
Infected objects:    4
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-27 21:07:22

RS20.46.12未杀！

显示全部楼层 · 发表于 2008-5-27 21:09:31

我来查查

显示全部楼层 · 发表于 2008-5-27 21:11:57

D:\download\Nt_File_Temp.rar>>Nt_File_Temp\0.bmp Trojan.Cap852416.almc 木马还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\1.bmp W32.Small.NDW.akkb 病毒还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\2.bmp TrojanDropper.Gen.wjmy 木马还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\3.bmp Trojan.Cap85274.ytxm 木马还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\4.bmp Trojan.Cap85274.besi 木马还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\5.bmp TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\6.bmp Trojan.Cap85274.nlhv 木马还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\7.bmp Trojan.Cap85271.bqpn 木马还未处理
D:\download\Nt_File_Temp.rar>>Nt_File_Temp\8.bmp TrojanDropper.Gen.kwnq 木马还未处理

显示全部楼层 · 发表于 2008-5-27 21:12:16

nod32未检测到卡巴检测到2个特洛伊

[可疑文件] 请高手测试是否是病毒

本帖子中包含更多资源

本帖子中包含更多资源

回复 3楼 kiki 的帖子

F-Prot 4.4.4

2/0

浏览过的版块