two viruses

显示全部楼层 · 发表于 2007-3-14 13:14:38

kill them quickly

[ 本帖最后由 kp2006 于 2007-3-14 13:16 编辑 ]

显示全部楼层 · 发表于 2007-3-14 13:31:59

Scan performed at: 2007-3-14 13:31:31
Scanning Log
NOD32 version 2113 (20070313) NT
Command line: C:\Documents and Settings\EQ2\桌面\WINDOWS.rar
Operating memory - is OK

Date: 14.3.2007 Time: 13:31:35
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\WINDOWS.rar
C:\Documents and Settings\EQ2\桌面\WINDOWS.rar ?RAR ?6.rar ?RAR ?6.exe - a variant of Win32/Agent.NAU worm
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:31:38 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-3-14 13:32:16

Scan performed at: 2007-3-14 13:31:41
Scanning Log
NOD32 version 2113 (20070313) NT
Command line: C:\Documents and Settings\EQ2\桌面\6.rar
Operating memory - is OK

Date: 14.3.2007 Time: 13:31:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\6.rar
C:\Documents and Settings\EQ2\桌面\6.rar ?RAR ?6.exe - a variant of Win32/Agent.NAU worm
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:31:49 Total scanning time: 4 sec (00:00:04)

显示全部楼层 · 发表于 2007-3-14 13:39:19

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\WINDOWS.rar'
C:\Documents and Settings\Administrator\My Documents\
  WINDOWS.rar
[0] Archive type: RAR
--> 6.rar
      [1] Archive type: RAR
      --> 6.exe
         [DETECTION] Contains signature of the worm WORM/Agent.T.8
         [WARNING] Infected files in archives cannot be repaired!
--> setup.rar
      [1] Archive type: RAR
      --> setup.exe
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\6.rar'
C:\Documents and Settings\Administrator\My Documents\
  6.rar
[0] Archive type: RAR
--> 6.exe
      [DETECTION] Contains signature of the worm WORM/Agent.T.8
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-14 13:45:35

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 3/14/2007
Start time: 3/14/2007 13:45
Engine(s): Engine A (AVK 17.3271), Engine B (AVKB 17.172)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 6.exe
In archive: C:\Documents and Settings\Administrator\桌面\6.rar
Status: Virus detected
Virus: Worm.Win32.Agent.t (Engine A)
Object: 6.exe\[NsPack]\[NsPack]\[NsPack]\[NsPack]\[PECompact]
In archive: C:\Documents and Settings\Administrator\桌面\6.rar
Status: Virus detected
Virus: Win32:Delf-DSR [Wrm] (Engine B)
Object: 6.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Worm.Win32.Agent.t (Engine A), Win32:Delf-DSR [Wrm] (2x) (Engine B)
Object: 6.rar 6.exe
In archive: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
Status: Virus detected
Virus: Worm.Win32.Agent.t (Engine A)
Object: 6.rar\6.exe\[NsPack]\[NsPack]\[NsPack]\[NsPack]\[PECompact]
In archive: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
Status: Virus detected
Virus: Win32:Delf-DSR [Wrm] (Engine B)
Object: WINDOWS.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Worm.Win32.Agent.t (Engine A), Win32:Delf-DSR [Wrm] (2x) (Engine B)
Analysis complete: 3/14/2007 13:45
2 files checked
2 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-14 13:46:22

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-13
Start time: 2007-3-14 13:46
Engine(s): KAV engine (AVK 17.3243), BD-Engine (BD 17.2404)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 6.exe
In archive: C:\Documents and Settings\Administrator\桌面\6.rar
Status: Virus detected
Virus: Worm.Win32.Agent.t (KAV engine), Win32.be..inur (BD-Engine)
Object: 6.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Worm.Win32.Agent.t (KAV engine), Win32.be..inur (BD-Engine)
Object: 6.rar 6.exe
In archive: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
Status: Virus detected
Virus: Worm.Win32.Agent.t (KAV engine)
Object: 6.rar 6.exe
In archive: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
Status: Virus detected
Virus: Win32.be..inur (BD-Engine)
Object: setup.rar setup.exe
In archive: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
Status: Virus detected
Virus: Trojan.ree. (BD-Engine)
Object: WINDOWS.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Worm.Win32.Agent.t (KAV engine), Win32.be..inur, Trojan.ree. (BD-Engine)
Analysis complete: 2007-3-14 13:46
2 files checked
2 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-14 13:57:36

总算见到了norton的启发报:

显示全部楼层 · 发表于 2007-3-14 14:06:19

微点

显示全部楼层 · 发表于 2007-3-14 14:33:24

windows.rar 里面的setup.exe 卡吧红伞都不报～～
来上上报吧～～

显示全部楼层 · 发表于 2007-3-14 14:40:32

Result: 2 malware found
Worm.Win32.Agent.t (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\6.rar\6.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\WINDOWS.rar\6.rar\6.exe

two viruses

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源