继续玩儿

显示全部楼层 · 发表于 2007-3-10 20:29:19

Starting the file scan:

Begin scan in 'D:\cmdbcs.rar'
D:\cmdbcs.rar
  [0] Archive type: RAR
  --> cmdbcs.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-10 20:30:50

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-9
Start time: 2007-3-10 20:29
Engine(s): KAV engine (AVK 17.3157), BD-Engine (BD 17.2348)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: cmdbcs.exe
In archive: D:\cmdbcs.rar
Status: Suspected virus
Virus: Generic.Malware.Sdld!g.604B0CE8 (BD-Engine)
Object: cmdbcs.rar
Path: D:
Status: Suspected virus
Virus: Generic.Malware.Sdld!g.604B0CE8 (BD-Engine)
Analysis complete: 2007-3-10 20:29
1 files checked
0 infected files detected
1 suspected files detected

显示全部楼层 · 发表于 2007-3-10 20:30:58

Scan performed at: 2007-3-10 20:31:10
Scanning Log
NOD32 version 2106 (20070310) NT
Command line: C:\Documents and Settings\EQ2\桌面\cmdbcs.rar
Operating memory - is OK

Date: 10.3.2007 Time: 20:31:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\cmdbcs.rar
C:\Documents and Settings\EQ2\桌面\cmdbcs.rar ?RAR ?cmdbcs.exe - probably a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 20:31:14 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-10 22:05:50

没跑影子，就冒冒险8

显示全部楼层 · 发表于 2007-3-10 22:09:38

LS的比偶大胆。。。偶一玩毒就用影子。。。。

显示全部楼层 · 发表于 2007-3-10 22:12:59

偶也是看情况，先判断下危险度再试。

刚才用AVK06在windows目录下查出了exe病毒文件。事实再次证明，熊猫查杀不行，TP防御也并不是多么厉害。

[ 本帖最后由 jlennon 于 2007-3-10 22:16 编辑 ]

显示全部楼层 · 发表于 2007-3-10 22:14:19

偶啥也不管。。。。一看毒就立刻将OS切换到影子状态下。。。哈哈。。。

显示全部楼层 · 发表于 2007-3-10 22:19:57

其实我以前也用影子。
不过有一次测试PCC2007的那个HIPS功能，垃圾啊垃圾。
在全影子模式下，把OS干崩溃了，连带MBR也损坏了。

显示全部楼层 · 发表于 2007-3-10 22:21:18

此后再也不用垃圾的趋势了

[病毒样本] 继续玩儿

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块