查看: 3160|回复: 10
收起左侧

[病毒样本] Virus or not?

[复制链接]
Snorelax
发表于 2007-3-13 21:13:06 | 显示全部楼层 |阅读模式
毒吗?红伞似乎~飞过!

[ 本帖最后由 Snorelax 于 2007-3-13 21:17 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
kp2006
头像被屏蔽
发表于 2007-3-13 21:18:26 | 显示全部楼层
kv监控报gamepass
zxy900906
发表于 2007-3-13 21:24:09 | 显示全部楼层
Scan performed at: 2007-3-13 21:22:56
Scanning Log
NOD32 version 2112 (20070313) NT
Command line: C:\Documents and Settings\user\桌面\setup[1]
E:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK - Error reading disk sectorError reading disk sectorError reading disk sector

Date: 13.3.2007  Time: 21:23:07
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\user\桌面\setup[1]\
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?tshz103.exe - Win32/Adware.CDN application - was a part of the deleted object
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?ad838.exe ?NSIS ?cpush.dll - Win32/Adware.BHO.AV application - was a part of the deleted object
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?zhenghe07.exe - a variant of Win32/Agent.NEO trojan - was a part of the deleted object
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?2005.exe - probably a variant of Win32/Agent.NEO trojan - was a part of the deleted object
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?103.exe - is OK
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?dodolook212.exe ?NSIS ?System.dll - is OK
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?dodolook212.exe ?NSIS ?446.exe ?NSIS ?System.dll - is OK
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?dodolook212.exe ?NSIS ?446.exe ?NSIS ?DoSSSetup.dll - is OK
C:\Documents and Settings\user\桌面\setup[1]\setup.exe ?RAR ?dodolook212.exe ?NSIS ?446.exe ?NSIS ?acpidisk.sys - is OK
Number of scanned files: 10
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 21:23:10 Total scanning time: 3 sec (00:00:03)
小邪邪
发表于 2007-3-13 21:24:42 | 显示全部楼层
AVK

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
鱼是一只我
发表于 2007-3-13 21:41:39 | 显示全部楼层
原来用的是avk啊~
avk有中文版?

驱逐舰报

[ 本帖最后由 鱼是一只我 于 2007-3-13 21:46 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
蓝色牛仔裤
发表于 2007-3-13 22:22:48 | 显示全部楼层
Starting the file scan:

Begin scan in 'D:\setup[1].rar'
D:\setup[1].rar
  [0] Archive type: RAR
    --> setup[1]\setup.exe
      [1] Archive type: RAR SFX (self extracting)
      --> tshz103.exe
          [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.11.B
      --> zhenghe07.exe
          [DETECTION] Is the Trojan horse TR/Agent.NTO
      --> 2005.exe
          [DETECTION] Is the Trojan horse TR/Agent.NTP
      [WARNING]   The file was ignored!
蓝色牛仔裤
发表于 2007-3-13 22:24:24 | 显示全部楼层
Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 13.03.2007
Start time: 13.03.2007 22:23
Engine(s): Engine A (AVK 17.3254), Engine B (AVKB 17.172)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: setup[1]/setup.exe/data.rar/ad838.exe/stream data0001
        In archive: D:\setup[1].rar
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.BHO.av (Engine A)
Object: setup[1].rar
        Path: D:
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.BHO.av (Engine A)
Analysis complete: 13.03.2007 22:23
    1 files checked
    1 infected files detected
    0 suspected files detected
jlennon
头像被屏蔽
发表于 2007-3-13 22:49:53 | 显示全部楼层
AVK没有中文版,小邪邪用的是汉化版。
jlennon
头像被屏蔽
发表于 2007-3-13 22:54:08 | 显示全部楼层
2

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
The EQs
发表于 2007-3-13 22:56:06 | 显示全部楼层
nod32全杀。。。。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-1-10 19:57 , Processed in 0.120416 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表