再来两个

显示全部楼层 · 发表于 2007-3-7 15:43:27

还是在pcshow发现的

显示全部楼层 · 发表于 2007-3-7 15:44:17

Scan performed at: 2007-3-7 15:44:10
Scanning Log
NOD32 version 2099 (20070306) NT
Command line: C:\Documents and Settings\EQ2\桌面\新建文件夹.rar C:\Documents and Settings\EQ2\桌面\rundl132.rar
Operating memory - is OK

Date: 7.3.2007 Time: 15:44:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\新建文件夹.rar; C:\Documents and Settings\EQ2\桌面\rundl132.rar
C:\Documents and Settings\EQ2\桌面\新建文件夹.rar ?RAR ?新建文件夹\11[1].exe - Win32/TrojanDropper.Small.APR trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\rundl132.rar ?RAR ?rundl132.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 15:44:17 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-3-7 15:58:06

杀了

显示全部楼层 · 发表于 2007-3-7 16:02:34

微点同杀，第一个报了生成的exe已知，其他生成物报未知，第二个微点报已知

显示全部楼层 · 发表于 2007-3-7 16:03:18

FS7.0
Trojan-PSW.Win32.WOW.ec (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\ÐÂ½¨ÎÄ¼þ¼Ð.rar\ÐÂ½¨ÎÄ¼þ¼Ð\11[1].exe
Worm.Win32.Viking.dp (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\rundl132.rar\rundl132.exe

显示全部楼层 · 发表于 2007-3-7 16:05:48

咖啡企业版第一个没报，第二个报：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\RUNDL132\RUNDL132.EXE W32/HLLP.Philis.hc ()

显示全部楼层 · 发表于 2007-3-7 16:50:14

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-6
Start time: 2007-3-7 16:50
Engine(s): KAV engine (AVK 17.3103), BD-Engine (BD 17.2113)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: rundl132.exe
In archive: C:\Documents and Settings\Administrator\桌面\rundl132.rar
Status: Virus detected
Virus: Worm.Win32.Viking.dp (KAV engine), GenPack:Win32.Worm.Viking.BX (BD-Engine)
Object: rundl132.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Worm.Win32.Viking.dp (KAV engine), GenPack:Win32.Worm.Viking.BX (BD-Engine)
Object: 新建文件夹 11[1].exe
In archive: C:\Documents and Settings\Administrator\桌面\新建文件夹.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.WOW.ec (KAV engine)
Object: 新建文件夹\11[1].exe
In archive: C:\Documents and Settings\Administrator\桌面\新建文件夹.rar
Status: Virus detected
Virus: GenPack:Trojan.Downloader.Agent.AWH (BD-Engine)
Object: 新建文件夹.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.WOW.ec (KAV engine), GenPack:Trojan.Downloader.Agent.AWH (BD-Engine)
Analysis complete: 2007-3-7 16:50
2 files checked
2 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-7 17:00:26

第一个nod32报新建文件夹\11[1].exe - Win32/TrojanDropper.Small.APR 木马
第二个驱逐舰报Win32.HLLW.Gavir.54

显示全部楼层 · 发表于 2007-3-7 19:49:20

金山报2

显示全部楼层 · 发表于 2007-3-8 00:16:29

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\rundl132.rar'
C:\Documents and Settings\Administrator\My Documents\
  rundl132.rar
[0] Archive type: RAR
--> rundl132.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\新建文件夹.rar'
C:\Documents and Settings\Administrator\My Documents\
  新建文件夹.rar
[0] Archive type: RAR
--> ÐÂ½¨ÎÄ¼þ¼Ð\11[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

[病毒样本] 再来两个

本帖子中包含更多资源

本帖子中包含更多资源