看看能检测出几个O(∩_∩)O~

显示全部楼层 · 发表于 2009-6-12 00:27:45

nod

RAR > v\lsprst7.dll is OK
RAR > v\ssprs.dll is OK
RAR > v\error.ini is OK
RAR > v\13.tmp a variant of Win32/PSW.OnLineGames.NTM trojan
RAR > v\17.tmp a variant of Win32/PSW.OnLineGames.NTM trojan
RAR > v\JingzTo.Toz is OK
RAR > v\winyyy.sys Win32/TrojanDownloader.Delf.OQM trojan

显示全部楼层 · 发表于 2009-6-12 00:29:14

Begin scan in 'C:\Documents and Settings\Administrator\桌面\v.rar'
C:\Documents and Settings\Administrator\桌面\v.rar
[0] Archive type: RAR
--> v\13.tmp
   [DETECTION] Is the TR/Spy.Gen Trojan
--> v\17.tmp
   [DETECTION] Is the TR/Spy.Gen Trojan
--> v\winyyy.sys
   [DETECTION] Is the TR/Agent.btil Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-6-12 00:30:31

未报的那三个看起来不像毒
Undet [             ](    ) in C:\Scan\v.rar,(v\lsprst7.dll) [RAR (ARCHIVE)]
Undet [             ](    ) in C:\Scan\v.rar,(v\ssprs.dll) [RAR (ARCHIVE)]
Undet [             ](    ) in C:\Scan\v.rar,(v\error.ini) [RAR (ARCHIVE)]
Found [TSPY_ONLINEG.TOS]( 1) in C:\Scan\v.rar,(v\13.tmp) [RAR (ARCHIVE)]
Found [TROJ_OLGAME.L-CN]( 1) in C:\Scan\v.rar,(v\17.tmp) [RAR (ARCHIVE)]
Found [  Cryp_TROJ.A-CN]( 1) in C:\Scan\v.rar,(v\JingzTo.Toz) [RAR (ARCHIVE)]
Found [ TROJ_AGENT.ANBL]( 1) in C:\Scan\v.rar,(v\winyyy.sys) [RAR (ARCHIVE)]

显示全部楼层 · 发表于 2009-6-12 00:31:45

看来质量不高啊

显示全部楼层 · 发表于 2009-6-12 00:39:57

请问什么软件？趋势科技？

[ 本帖最后由 sololp 于 2009-6-12 00:45 编辑 ]

显示全部楼层 · 发表于 2009-6-12 00:51:03

2009/6/12 0:48:36 已清除木马程序 Trojan.Win32.Agent.btil G:\Temp\Virus\v.rar/v\winyyy.sys
2009/6/12 0:48:36 已清除木马程序 Trojan-GameThief.Win32.MultiFirst.ge G:\Temp\Virus\v.rar/v\17.tmp//PE_Patch.Stolen
2009/6/12 0:48:36 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.uszg G:\Temp\Virus\v.rar/v\13.tmp//PE_Patch.Stolen

其余To KL

显示全部楼层 · 发表于 2009-6-12 07:48:33

2009-6-12 7:46:00 Ivan 2288 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v.rar\v\13.tmp" file.
2009-6-12 7:46:04 Ivan 2288 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v.rar\v\17.tmp" file.
2009-6-12 7:46:06 Ivan 2288 Sign of "Win32:Agent-ZNC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v.rar\v\winyyy.sys" file.

显示全部楼层 · 发表于 2009-6-12 11:22:38

NOD4.0, 红伞V9,A2都是检测出3个

显示全部楼层 · 发表于 2009-6-12 20:34:39

McAfee 报了3个。。

[病毒样本] 看看能检测出几个O(∩_∩)O~

本帖子中包含更多资源

回复 4楼 tun 的帖子

本帖子中包含更多资源