[病毒样本] 1-8

显示全部楼层 · 发表于 2007-3-7 15:19:46

看看你的杀几个

显示全部楼层 · 发表于 2007-3-7 15:22:39

雨伞全灭。。
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\8��.rar'
C:\Documents and Settings\Administrator\My Documents\
  8��.rar
[0] Archive type: RAR
--> 4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 6.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> 8.com
      [DETECTION] Is the Trojan horse TR/PSW.51386
      [WARNING] Infected files in archives cannot be repaired!
--> 1.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> 2.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> 3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年3月6日  23:22
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   9 Files were scanned
   8 viruses and/or unwanted programs were found
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   9 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-3-7 15:23:15

显示全部楼层 · 发表于 2007-3-7 15:24:27

驱逐舰报5个

显示全部楼层 · 发表于 2007-3-7 15:27:11

nod32报

8个.rar ?RAR ?4.exe - 未知的 NewHeur_PE 病毒 [7]
8个.rar ?RAR ?5.exe - 未知的 NewHeur_PE 病毒 [7]
8个.rar ?RAR ?6.exe - 未知的 NewHeur_PE 病毒 [7]
8个.rar ?RAR ?7.exe - Win32/TrojanDownloader.Delf.NJH 木马变种
8个.rar ?RAR ?8.com - 可能是 Win32/PSW.QQShou 木马变种
8个.rar ?RAR ?2.exe - Win32/Delf.NDZ 木马变种
8个.rar ?RAR ?3.exe - 未知的 NewHeur_PE 病毒 [7]

显示全部楼层 · 发表于 2007-3-7 15:29:25

哈哈，启发NOD32（4）和红伞(4)平手，NOD32漏一个样本，报3个已知，红伞报一个已知，3个基因扫描了

显示全部楼层 · 发表于 2007-3-7 15:29:30

费尔报两个

显示全部楼层 · 发表于 2007-3-7 15:50:16

除了一个dll，其他微点全杀，其中3个已知，4个靠行为判定

显示全部楼层 · 发表于 2007-3-7 15:52:30

Scan performed at: 2007-3-7 15:51:53
Scanning Log
NOD32 version 2099 (20070306) NT
Command line: C:\Documents and Settings\EQ2\桌面\8个.rar
Operating memory - is OK

Date: 7.3.2007 Time: 15:51:57
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\8个.rar
C:\Documents and Settings\EQ2\桌面\8个.rar ?RAR ?4.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\8个.rar ?RAR ?5.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\8个.rar ?RAR ?6.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\8个.rar ?RAR ?7.exe - a variant of Win32/TrojanDownloader.Delf.NJH trojan
C:\Documents and Settings\EQ2\桌面\8个.rar ?RAR ?8.com - probably a variant of Win32/PSW.QQShou trojan
C:\Documents and Settings\EQ2\桌面\8个.rar ?RAR ?2.exe - a variant of Win32/Delf.NDZ trojan
C:\Documents and Settings\EQ2\桌面\8个.rar ?RAR ?3.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 9
Number of threats found: 7
Number of files cleaned: 1
Time of completion: 15:51:58 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-3-7 15:53:27

dr.web--5个
kis--2个
红伞---8𠆤
费尓二个
avast---1个

[病毒样本] 1-8

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源