这个是个什么毒？红伞扫出来赛门铁克没反应。

显示全部楼层 · 发表于 2008-8-27 11:02:33

是不是完美卸载的。

显示全部楼层 · 发表于 2008-8-27 11:03:25

可不能小看2.72k啊，当年CIH才几百字节而已。。。

显示全部楼层 · 发表于 2008-8-27 11:22:57

去在线扫描的...结果如下....

VirSCAN.org Scanned Report :
Scanned time : 2008/08/27 11:20:08 (CST)
Scanner results: 17%的杀软(6/36)报告发现病毒
File Name    : PnpWmkDrv.rar
File Size    : 2785 byte
File Type    : RAR archive data, v1d, os
MD5          : 85950e20b65c269226f8ffb37d400f1e
SHA1          : a9bebf7f7200bb5c6207013ba95d27a9523f94f7
Online report  : http://virscan.org/report/9b6fbdb50d583c60ad699df9fb11f764.html
Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.22       2008.08.26       2008-08-26  2.97 -
安博士V3    2008.08.26.01 2008.08.26       2008-08-26  0.89 Win-AppCare/Agent.7168
AntiVir       7.8.1.23       7.0.6.74       2008-08-26  2.22 Rkit/Agent.GZ
Arcavir       1.0.5          200808261810    2008-08-26  1.19 -
AVAST!       3.0.1          080826-0       2008-08-26  0.00 -
AVG          7.5.51.442    270.6.9/1636    2008-08-26  1.52 -
BitDefender 7.60825.1611748 7.20684          2008-08-27  2.88 -
CA (VET)    9.0.0.143    31.6.6050       2008-08-26  4.33 -
ClamAV       0.93.3       8096             2008-08-27  0.01 -
Comodo       2.11          2.0.0.628       2008-08-26  0.42 -
CP Secure    1.1.0.715    2008.08.27       2008-08-27  6.34 -
Dr.Web       4.44.0.9170    2008.08.26       2008-08-26  3.10 -
ewido       4.0.0.2       2008.08.26       2008-08-26  3.01 -
F-Prot       4.4.4.56       20080826       2008-08-26  0.98 W32/Backdoor2.FMR (exact)
F-Secure    5.51.6100    2008.08.27.02    2008-08-27  0.04 -
飞塔          2.81-3.11    9.472          2008-08-25  1.73 -
ViRobot       20080826       2008.08.26       2008-08-26  0.40 -
Ikarus       T3.1.01.34    2008.08.26.71343  2008-08-26  3.15 Virus.Win32.AdWare
江民杀毒    11.0.706       2008.08.26       2008-08-26  1.18 -
卡巴斯基    5.5.10       2008.08.27       2008-08-27  0.03 -
金山毒霸    2008.1.14.15 2008.8.26.17    2008-08-26  0.60 -
迈克菲       5.2.00       5370             2008-08-26  2.73 -
Microsoft    1.3807       2008.08.26       2008-08-26  5.36 VirTool:WinNT/Rootkitdrv.BR
mks_vir       2.01          2008.08.25       2008-08-25  2.58 -
Norman       5.93.01       5.93.00          2008-08-26  5.00 -
熊猫卫士    9.05.01       2008.08.26       2008-08-26  2.01 -
趋势科技    8.700-1004    5.500.07       2008-08-26  0.02 -
Quick Heal    9.50          2008.08.26       2008-08-26  2.02 -
瑞星          20.0          20.59.11.00    2008-08-26  0.78 -
Sophos       2.77.0       4.32             2008-08-27  1.93 -
Sunbelt       3.1.1582.1    2204             2008-08-25  0.40 -
赛门铁克    1.3.0.24       20080826.023    2008-08-26  0.05 -
nProtect    2008-08-25.00 1927364          2008-08-25  3.47 -
The Hacker    6.3.0.6       v00060          2008-08-22  0.41 -
VBA32       3.12.8.4       20080826.0635    2008-08-26  1.13 -
VirusBuster 4.5.11.10    10.84.12/598596 2008-08-26  0.78 Backdoor.Agent.ECAN

显示全部楼层 · 发表于 2008-8-27 11:43:49

kis09 大蜘蛛 MISS 只有小红伞扫出伞好强的

显示全部楼层 · 发表于 2008-8-27 13:08:27

我的铁壳和BD都扫不出。。。哎。。。

显示全部楼层 · 发表于 2008-8-27 17:09:04

Kaspersky miss
TO KL

显示全部楼层 · 发表于 2008-8-27 17:37:41

RS20.59.21未杀！

显示全部楼层 · 发表于 2008-8-27 18:54:08

tart of the scan: 2008年8月27日  18:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\acer\桌面\样本'
C:\Documents and Settings\acer\桌面\样本\PnpWmkDrv.rar
[0] Archive type: RAR
--> PnpWmkDrv.sys
   [DETECTION] Contains recognition pattern of the RKIT/Agent.GZ root kit
[NOTE]    The file was moved to '492532a2.qua'!

End of the scan: 2008年8月27日  18:53
Used time: 00:08 Minute(s)

The scan has been done completely.

   1 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-8-27 19:16:53

Hello,

PnpWmkDrv.sys

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: PnpWmkDrv.rar

显示全部楼层 · 发表于 2008-8-27 19:47:09

费尔不误报

[病毒样本] 这个是个什么毒？红伞扫出来赛门铁克没反应。

2/0