再来玩一个

显示全部楼层 · 发表于 2007-3-22 00:17:01

不要直接对解压包扫描，我弄了个密码virus
来玩玩

显示全部楼层 · 发表于 2007-3-22 00:19:01

Time Module Object Name Threat Action User Information
2007-3-22 0:19:18 AMON file C:\Documents and Settings\EQ2\桌面\virus\virus\dl[1].htm JS/TrojanDownloader.Psyme.DC trojan quarantined - deleted - error while cleaning - operation unavailable for this type of object KASPERSK-70947A\EQ2 Event occurred on a new file created by the application: D:\Program Files\WinRAR\WinRAR.exe. The file was moved to quarantine. You may close this window.

显示全部楼层 · 发表于 2007-3-22 00:34:09

咖啡拦截3个：
\Downloads\virus\virus\autorun.inf 防病毒标准保护:禁止创建自动运行文件

[ 本帖最后由小邪邪于 2007-3-22 00:41 编辑 ]

显示全部楼层 · 发表于 2007-3-22 00:35:09

咖啡居然都发现病毒了，天啊

不过咖啡把最后一个给漏掉了

少杀鸟一个

[ 本帖最后由 aoyang 于 2007-3-22 00:38 编辑 ]

显示全部楼层 · 发表于 2007-3-22 00:37:24

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\virus'
C:\Documents and Settings\morgan\My Documents\virus\virus\
  autorun.inf
  Cn911.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!
  dl[1].htm
   [DETECTION] Contains signature of the HTML script virus HTML/Dldr.Agent.DL
   [INFO]    The file was deleted!
  ODBCJET.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-22 00:38:09

发现nod32隔离了两个。。。。

显示全部楼层 · 发表于 2007-3-22 00:42:07

漏一个哈

显示全部楼层 · 发表于 2007-3-22 09:31:15

创建文件
进程路径:E:\soft_killer\virus\Cn911.exe
文件路径:C:\WINDOWS\system32\ODBCJET.exe

创建文件
进程路径:E:\soft_killer\virus\Cn911.exe
文件路径:C:\WINDOWS\system32\Del.bat

木马名称:Trojan-Downloader.Win32.VB.cih
程序:
E:\SOFT_KILLER\VIRUS\CN911.EXE

[ 本帖最后由 Nblock 于 2007-3-22 09:53 编辑 ]

显示全部楼层 · 发表于 2007-3-22 09:47:08

norton

显示全部楼层 · 发表于 2007-3-22 10:32:44

有漏網之魚...

Check system areas...
Check selected directories and files...
Object: Cn911.exe
Path: D:\virus\virus
Status: Virus detected
Virus: Trojan-Downloader.Win32.Agent.bgx (KAV engine), MemScan:Trojan.Agent.VB.AU (BD-Engine)
Object: dl[1].htm
Path: D:\virus\virus
Status: Virus detected
Virus: Trojan-Downloader.JS.Psyme.dc (KAV engine), Generic.XPL.ADODB.DCABB494 (BD-Engine)
Analysis complete: 2007-3-22 10:29
4 files checked
2 infected files detected
0 suspected files detected

再来玩一个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源