来自深度样本区的一个极厉害的毒

显示全部楼层 · 发表于 2007-3-11 22:00:15

NOD32挂了，千万注意不要轻易运行，据说见嘛删嘛！

显示全部楼层 · 发表于 2007-3-11 22:03:01

Starting the file scan:

Begin scan in 'D:\全局删除样本,请小心测试.rar'
D:\全局删除样本,请小心测试.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Contains signature of the dropper DR/KillFiles.EV
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-11 22:03:04

DR.WEB报了！

显示全部楼层 · 发表于 2007-3-11 22:03:52

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-9
Start time: 2007-3-11 22:02
Engine(s): KAV engine (AVK 17.3157), BD-Engine (BD 17.2348)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 1.exe
In archive: D:\全局删除样本,请小心测试.rar
Status: Virus detected
Virus: Trojan.BAT.KillFiles.ev (KAV engine)
Object: 全局删除样本,请小心测试.rar
Path: D:
Status: Virus detected
Virus: Trojan.BAT.KillFiles.ev (KAV engine)
Analysis complete: 2007-3-11 22:02
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-11 22:04:11

晕死,不就是当年我的那种病毒的翻本嘛,利用批处理而已,我一个小时能做100个都不成问题.

显示全部楼层 · 发表于 2007-3-11 23:09:43

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-11
Start time: 2007-3-11 23:09
Engine(s): KAV engine (AVK 17.3208), BD-Engine (BD 17.2388)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 1.exe
In archive: C:\Documents and Settings\Administrator\桌面\全局删除样本,请小心测试.rar
Status: Virus detected
Virus: Trojan.BAT.KillFiles.ev (KAV engine), Dropped:Trojan.BAT.Delete.O (BD-Engine)
Object: 全局删除样本,请小心测试.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan.BAT.KillFiles.ev (KAV engine), Dropped:Trojan.BAT.Delete.O (BD-Engine)
Analysis complete: 2007-3-11 23:09
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-12 00:09:01

用我的引擎扫了一下：）

显示全部楼层 · 发表于 2007-3-12 01:25:44

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\全局删除样本,请小心测试.rar'
C:\Documents and Settings\Administrator\My Documents\
  全局删除样本,请小心测试.rar
[0] Archive type: RAR
--> 1.exe
      [DETECTION] Contains signature of the dropper DR/KillFiles.EV
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
费尔也有反应。。

显示全部楼层 · 发表于 2007-3-12 11:10:26

卡巴

显示全部楼层 · 发表于 2007-3-12 11:10:59

微点
恶意程序名称:Malware.Win32.DelFile.b

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TWIEXA\1.EXE
是恶意程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] 来自深度样本区的一个极厉害的毒

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块