病机上抓的

显示全部楼层 · 发表于 2007-3-18 10:17:12

这几个样本是昨天毒机上抓下来的,实在太多,没抓完,懒了点哈.红伞基本都能杀.一会把昨天下午的战斗历程写出来.

显示全部楼层 · 发表于 2007-3-18 10:18:48

Scan performed at: 2007-3-18 10:18:54
Scanning Log
NOD32 version 2124 (20070317) NT
Command line: C:\Documents and Settings\EQ2\桌面\6F1B13CE.rar C:\Documents and Settings\EQ2\桌面\Logo1_.rar C:\Documents and Settings\EQ2\桌面\qqs3.rar
Operating memory - is OK

Date: 18.3.2007 Time: 10:18:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\6F1B13CE.rar; C:\Documents and Settings\EQ2\桌面\Logo1_.rar; C:\Documents and Settings\EQ2\桌面\qqs3.rar
C:\Documents and Settings\EQ2\桌面\6F1B13CE.rar ?RAR ?6F1B13CE.EXE - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\6F1B13CE.rar ?RAR ?645242C2.EXE - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\Logo1_.rar ?RAR ?Logo1_.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\qqs3.rar ?RAR ?qqs3.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 8
Number of threats found: 4
Number of files cleaned: 3
Time of completion: 10:19:00 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-3-18 10:42:47

3个卡巴全没报晕

显示全部楼层 · 发表于 2007-3-18 10:45:22

AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间: 10:45:04 2007-3-18

+ 扫描结果:

F:\样本\6F1B13CE.rar/6F1B13CE.EXE -> Downloader.Small.ejw : 未进行操作.

::报告结束

显示全部楼层 · 发表于 2007-3-18 10:54:27

这些是卡巴杀过了之后再抓出来的.当然不报了.安全控制中心有我战病毒的帖子刚写出来.

显示全部楼层 · 发表于 2007-3-18 10:56:14

在AVG杀到第一个附件的病毒(就是6F1B13CE.rar)时被强行关了机的,所以AVG还能杀.

显示全部楼层 · 发表于 2007-3-18 11:13:04

驱逐舰

显示全部楼层 · 发表于 2007-3-18 11:32:48

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-14
Start time: 2007-3-18 11:29
Engine(s): KAV engine (AVK 17.3277), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: 6F1B13CE.EXE
In archive: C:\Documents and Settings\Administrator\桌面\6F1B13CE.rar
Status: Suspected virus
Virus: GenPack:Generic.Malware.Bdldg.F50656DC (BD-Engine)
Object: 6F1B13CE.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: GenPack:Generic.Malware.Bdldg.F50656DC (BD-Engine)
Analysis complete: 2007-3-18 11:29
3 files checked
1 infected files detected
0 suspected files detected
==============================

显示全部楼层 · 发表于 2007-3-18 11:48:15

驱逐舰报2个，差一个啊

显示全部楼层 · 发表于 2007-3-18 20:53:48

还有几个杀软没参与测杀，多半容易漏掉，我顶上来。沉得太快了。

[病毒样本] 病机上抓的

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源