样本两个

显示全部楼层 · 发表于 2007-3-14 18:50:23

................................

显示全部楼层 · 发表于 2007-3-14 19:01:43

Starting the file scan:

Begin scan in 'D:\virus.rar'
D:\virus.rar
  [0] Archive type: RAR
  --> package.exe
   [DETECTION] Is the Trojan horse TR/Agent.37320
  --> hk21.exe
   [DETECTION] Is the Trojan horse TR/Dialer.RI
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-14 19:01:55

Scan performed at: 2007-3-14 19:01:00
Scanning Log
NOD32 version 2113 (20070313) NT
Command line: C:\Documents and Settings\user\桌面\virus.rar
E:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK - Error reading disk sectorError reading disk sectorError reading disk sector

Date: 14.3.2007 Time: 19:01:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\user\桌面\virus.rar
C:\Documents and Settings\user\桌面\virus.rar ?RAR ?package.exe - Win32/TrojanDownloader.Agent.AWF trojan - was a part of the deleted object
C:\Documents and Settings\user\桌面\virus.rar ?RAR ?hk21.exe - Win32/Dialer.RI trojan - was a part of the deleted object
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 19:01:09 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-14 19:02:29

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 3/13/2007
Start time: 3/14/2007 19:02
Engine(s): Engine A (AVK 17.3243), Engine B (AVKB 17.172)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: package.exe
In archive: C:\Documents and Settings\Administrator\桌面\virus.rar
Status: Virus detected
Virus: Trojan-Clicker.Win32.Agent.jh (Engine A)
Object: hk21.exe
In archive: C:\Documents and Settings\Administrator\桌面\virus.rar
Status: Dialer found
Dialler: Trojan.Win32.Dialer.ri (Engine A)
Object: virus.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-Clicker.Win32.Agent.jh, Trojan.Win32.Dialer.ri (Engine A)
Analysis complete: 3/14/2007 19:02
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-14 19:03:06

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-13
Start time: 2007-3-14 19:02
Engine(s): KAV engine (AVK 17.3243), BD-Engine (BD 17.2404)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: package.exe
In archive: C:\Documents and Settings\Administrator\桌面\virus.rar
Status: Virus detected
Virus: Trojan-Clicker.Win32.Agent.jh (KAV engine), DeepScan:Generic.Malware.SP!Pk!.021DF1A8 (BD-Engine)
Object: hk21.exe
In archive: C:\Documents and Settings\Administrator\桌面\virus.rar
Status: Dialer found
Dialler: Trojan.Win32.Dialer.ri (KAV engine), Trojan.Dialer.RI (BD-Engine)
Object: virus.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-Clicker.Win32.Agent.jh, Trojan.Win32.Dialer.ri (KAV engine), DeepScan:Generic.Malware.SP!Pk!.021DF1A8, Trojan.Dialer.RI (BD-Engine)
Analysis complete: 2007-3-14 19:03
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-14 19:03:15

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 14.03.2007
Start time: 14.03.2007 19:02
Engine(s): Engine A (AVK 17.3276), Engine B (BD 17.2402)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: package.exe
In archive: D:\virus.rar
Status: Virus detected
Virus: Trojan-Clicker.Win32.Agent.jh (Engine A)
Object: hk21.exe
In archive: D:\virus.rar
Status: Dialer found
Dialler: Trojan.Win32.Dialer.ri (Engine A)
Object: virus.rar
Path: D:
Status: Virus detected
Virus: Trojan-Clicker.Win32.Agent.jh, Trojan.Win32.Dialer.ri (Engine A)
Analysis complete: 14.03.2007 19:02
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-14 19:04:59

哈~又慢了...

显示全部楼层 · 发表于 2007-3-14 19:06:03

显示全部楼层 · 发表于 2007-3-14 19:08:45

kv 干掉2个

显示全部楼层 · 发表于 2007-3-14 19:08:58

原帖由 蓝色牛仔裤 于 2007-3-14 19:04 发表
哈~又慢了...

牛仔裤，比杀软肯定你的多了。我现在就剩绿色版的AVK06，07。平时就开个小犀牛。

样本两个

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块