[病毒样本] 1-8

显示全部楼层 · 发表于 2007-3-7 16:58:19

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-6
Start time: 2007-3-7 16:57
Engine(s): KAV engine (AVK 17.3103), BD-Engine (BD 17.2113)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 5.exe
In archive: C:\Documents and Settings\Administrator\桌面\8个.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.OnLineGames.fq (KAV engine), MemScan:Trojan.PWS.OnlineGames.CB (BD-Engine)
Object: 8.com
In archive: C:\Documents and Settings\Administrator\桌面\8个.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.QQPass.up (KAV engine), Generic.PWS.WoW.57E78E14 (BD-Engine)
Object: 4.exe
In archive: C:\Documents and Settings\Administrator\桌面\8个.rar
Status: Virus detected
Virus: MemScan:Trojan.PWS.Agent.EH (BD-Engine)
Object: 7.exe
In archive: C:\Documents and Settings\Administrator\桌面\8个.rar
Status: Virus detected
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: 2.exe
In archive: C:\Documents and Settings\Administrator\桌面\8个.rar
Status: Virus detected
Virus: GenPack:Generic.Malware.BE!g.20F9DB00 (BD-Engine)
Object: 3.exe
In archive: C:\Documents and Settings\Administrator\桌面\8个.rar
Status: Virus detected
Virus: MemScan:Trojan.PWS.Agent.EH (BD-Engine)
Object: 8个.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.fq, Trojan-PSW.Win32.QQPass.up (KAV engine), MemScan:Trojan.PWS.Agent.EH (2x), MemScan:Trojan.PWS.OnlineGames.CB, BehavesLike:Win32.ExplorerHijack, Generic.PWS.WoW.57E78E14, GenPack:Generic.Malware.BE!g.20F9DB00 (BD-Engine)
Analysis complete: 2007-3-7 16:57
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-7 17:47:21

bridgewr

显示全部楼层 · 发表于 2007-3-7 18:02:10

咖啡确实别具一格,扫描报了两个,解压没有反应,哎,越来越烂了

显示全部楼层 · 发表于 2007-3-7 19:41:48

金山报6

显示全部楼层 · 发表于 2007-3-7 21:27:07

小紅傘抓到8個

F:\Virus Test\8個.rar
  [0] Archive type: RAR
  --> 4.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 5.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 6.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> 7.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 8.com
   [DETECTION] Is the Trojan horse TR/PSW.51386
  --> 1.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 2.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> 3.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

看來小紅傘真的不錯...
如果我的 kis6 不能用了
我也會換小紅傘...

显示全部楼层 · 发表于 2007-3-7 22:05:24

忘记说了。。nod32是报7个，但是隔离了一个。。。

显示全部楼层 · 发表于 2007-3-8 14:13:42

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.ZhengTu.aor
病毒： Trojan.DL.Delf.xrw
病毒： Trojan.PSW.QQPass.rok

MAC地址：00:14:2A:9D:96:CC

用户来源：局域网

软件版本：19.13.31