[病毒样本] X2

显示全部楼层 · 发表于 2008-7-4 15:58:09

大家扫扫....

显示全部楼层 · 发表于 2008-7-4 16:54:15

D:\download\2.zip>>0628sa.exe Backdoor.RemoteABC.oc.lzdy 后门还未处理
D:\download\2.zip>>0703sa.exe TrojanAgent.18944.C.2.dggt 木马还未处理

显示全部楼层 · 发表于 2008-7-4 16:54:19

费尔全杀

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.Gpigeon2008.u

用户来源：互联网

软件版本：20.51.41
难道是新版鸽子

显示全部楼层 · 发表于 2008-7-4 17:10:23

Begin scan in 'C:\Documents and Settings\Administrator\桌面\2.zip'
C:\Documents and Settings\Administrator\桌面\2.zip
  [0] Archive type: ZIP
  --> 0628sa.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
--> 0703sa.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Agent.18944.C.2
   [NOTE]    A backup was created as '48e7e927.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-4 17:11:22

f-secure found nothing

显示全部楼层 · 发表于 2008-7-4 17:16:30

病毒 2008-07-04 17:16:17 C:\Documents and Settings\Administrator\桌面\2.zip\0703sa.exe Win32.Hack.Pangu.a.110592 清除成功

显示全部楼层 · 发表于 2008-7-4 18:04:37

显示全部楼层 · 发表于 2008-7-4 18:05:17

显示全部楼层 · 发表于 2008-7-4 18:48:57

启发用了23 seconds

[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\2.zip->0628sa.exe->(NSPack)->(PE_Patch)->(NSPack)->(PE_Patch)
[Found possible virus] <W32/NewMalware-Rootkit-PX-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\2.zip->0703sa.exe->(UPX)

---------------------------------------------------------------------
Scan ended: 2008-7-4, 18:48:10
Duration: 0:00:23

Scan result:

Scanned files:    6
Infected objects:    2
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-7-4 18:53:56

卡7最新病毒库扫不出来。

[病毒样本] X2

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4