转AVPClub一样本.

显示全部楼层 · 发表于 2007-3-11 13:57:21

杀

显示全部楼层 · 发表于 2007-3-11 13:57:41

Starting the file scan:

Begin scan in 'D:\list.rar'
D:\list.rar
  [0] Archive type: RAR
  --> rundl132.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> Servera.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> winsys16_070307.dll
   [DETECTION] Is the Trojan horse TR/Spy.Delf.RP.1
  --> iexpl0ra.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> iexpl0re.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> IEXPLORE.win
   [DETECTION] Contains suspicious code HEUR/Malware
  --> LgSym.dll
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> mh.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> msm.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> my.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> Rav26.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.OL.1
  --> rundl13a.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-11 14:00:40

红伞不报的偶早就上报了

显示全部楼层 · 发表于 2007-3-11 14:03:55

^_^ 斑斑就是强!!!

显示全部楼层 · 发表于 2007-3-11 14:05:19

费尔

显示全部楼层 · 发表于 2007-3-11 14:19:00

卡巴十五
红伞十一
DR.WEB 十一

显示全部楼层 · 发表于 2007-3-11 14:24:09

nod32右键扫描报9个
Scan performed at: 2007-3-11 14:23:31
Scanning Log
NOD32 version 2106 (20070310) NT
Command line: C:\Documents and Settings\EQ2\桌面\list.rar
Operating memory - is OK

Date: 11.3.2007 Time: 14:23:36
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\list.rar
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?rundl132.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?Servera.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?wuaucll.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?driver.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?iexpl0ra.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?iexpl0re.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?LgSym.dll - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?Rav26.dll - a variant of Win32/PSW.Agent.NBX trojan
C:\Documents and Settings\EQ2\桌面\list.rar ?RAR ?rundl13a.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 16
Number of threats found: 9
Number of files cleaned: 1
Time of completion: 14:23:37 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

等下运行看看。。。

显示全部楼层 · 发表于 2007-3-11 14:25:54

运行第一个时候nod32隔离了10个生成物？。。。。。

显示全部楼层 · 发表于 2007-3-11 14:32:19

咖啡吃鸭蛋了

显示全部楼层 · 发表于 2007-3-11 14:32:26

运行任意一个可执行文件的时候。。。nod32几乎都是隔离10个的。。。里面有几个可执行文件可以被Outpost查杀。。。。

[病毒样本] 转AVPClub一样本.

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块