四个样本 ~~~

显示全部楼层 · 发表于 2007-3-18 19:58:13

卡巴杀有一个是下载者~~~

显示全部楼层 · 发表于 2007-3-18 20:01:53

驱逐舰杀一个

显示全部楼层 · 发表于 2007-3-18 20:03:24

kv都杀

显示全部楼层 · 发表于 2007-3-18 20:03:33

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-17
Start time: 2007-3-18 20:02
Engine(s): KAV engine (AVK 17.3337), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: dvtjl.exe
In archive: D:\桌面.rar
Status: Virus detected
Virus: Trojan.Win32.Zapchast.cp (KAV engine), Win32.Virut.A (BD-Engine)
Object: lyxl.exe
In archive: D:\桌面.rar
Status: Virus detected
Virus: Trojan.Win32.Zapchast.cp (KAV engine), Win32.Virut.A (BD-Engine)
Object: tltjqgyy.exe
In archive: D:\桌面.rar
Status: Virus detected
Virus: Trojan.Win32.Zapchast.cp (KAV engine), Win32.Virut.A (BD-Engine)
Object: vppe.exe
In archive: D:\桌面.rar
Status: Virus detected
Virus: Trojan-Downloader.Win32.Small.cwj (KAV engine), BehavesLike:Trojan.Downloader (BD-Engine)
Object: 桌面.rar
Path: D:
Status: Virus detected
Virus: Trojan.Win32.Zapchast.cp (3x), Trojan-Downloader.Win32.Small.cwj (KAV engine), Win32.Virut.A (3x), BehavesLike:Trojan.Downloader (BD-Engine)
Analysis complete: 2007-3-18 20:02
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-18 20:03:46

通杀

显示全部楼层 · 发表于 2007-3-18 20:26:55

卡巴全杀

显示全部楼层 · 发表于 2007-3-18 20:49:00

Scan performed at: 2007-3-18 20:49:06
Scanning Log
NOD32 version 2125 (20070318) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面.rar
Operating memory - is OK

Date: 18.3.2007 Time: 20:49:10
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面.rar
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?dvtjl.exe - Win32/ProcKill.B application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?lyxl.exe - Win32/ProcKill.B application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?tltjqgyy.exe - Win32/ProcKill.B application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?vppe.exe - a variant of Win32/TrojanDownloader.Small.AWA trojan
Number of scanned files: 5
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 20:49:11 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-3-18 20:55:14

FS7.0全报

显示全部楼层 · 发表于 2007-3-18 22:56:01

3个运行后退出，下载者就释放了3个文件，2个放在临时目录，一个放在系统目录下，但是没有写注册表。

显示全部楼层 · 发表于 2007-3-18 23:39:28

三个一运行便退出，第四个Cyberhawk报了

[病毒样本] 四个样本 ~~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

nod32通杀

本帖子中包含更多资源