Kaspersky Anti-Virus Found nothing

显示全部楼层 · 发表于 2007-3-22 12:22:27

Scan performed at: 2007-3-22 12:22:25
Scanning Log
NOD32 version 2134 (20070322) NT
Command line: C:\Documents and Settings\EQ2\桌面\down[1].rar C:\Documents and Settings\EQ2\桌面\wmv.rar C:\Documents and Settings\EQ2\桌面\~tmp.rar
Operating memory - is OK

Date: 22.3.2007 Time: 12:22:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\down[1].rar; C:\Documents and Settings\EQ2\桌面\wmv.rar; C:\Documents and Settings\EQ2\桌面\~tmp.rar
C:\Documents and Settings\EQ2\桌面\down[1].rar ?RAR ?down[1].exe - probably a variant of Win32/Viking virus
C:\Documents and Settings\EQ2\桌面\wmv.rar ?RAR ?wmv.exe - probably a variant of Win32/Spy.Delf.NDZ trojan
C:\Documents and Settings\EQ2\桌面\~tmp.rar ?RAR ?~tmp.tmp - probably a variant of Win32/Viking virus
Number of scanned files: 6
Number of threats found: 3
Number of files cleaned: 3
Time of completion: 12:22:32 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-3-22 12:26:15

mcafee

显示全部楼层 · 发表于 2007-3-22 12:44:12

报壳了
====================================
Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-22, 12:44:25
---------------------------------------------------------------------

[Found possible virus]       <{no name} (damaged, not disinfectable)>       C:\Documents and Settings\Administrator\桌面\down[1].rar->down[1].exe->(UPack)
[Contains infected objects]       C:\Documents and Settings\Administrator\桌面\down[1].rar
[Quarantined]       C:\Documents and Settings\Administrator\桌面\down[1].rar->down[1].exe->(UPack)
[Found possible virus]       <{no name} (damaged, not disinfectable)>       C:\Documents and Settings\Administrator\桌面\~tmp.rar->~tmp.tmp->(UPack)
[Contains infected objects]       C:\Documents and Settings\Administrator\桌面\~tmp.rar
[Quarantined]       C:\Documents and Settings\Administrator\桌面\~tmp.rar->~tmp.tmp->(UPack)

显示全部楼层 · 发表于 2007-3-22 12:45:37

Upack？？？UPX？？

显示全部楼层 · 发表于 2007-3-22 12:50:18

对象: ~tmp.rar
病毒: Win32.Worm.Viking.IZ (BD 引擎)
对象: down[1].rar
病毒: Win32.Worm.Viking.IZ (BD 引擎)
对象: wmv.rar
病毒: Generic.Malware.BE!dldspg.9E28FCE2 (BD 引擎)
最后一个算是bd的启发么？

显示全部楼层 · 发表于 2007-3-22 12:51:27

原帖由 pamier2001 于 2007-3-22 12:50 发表
对象: ~tmp.rar
      病毒: Win32.Worm.Viking.IZ (BD 引擎)
对象: down.rar
      病毒: Win32.Worm.Viking.IZ (BD 引擎)
对象: wmv.rar
      病毒: Generic.Malware.BE!dldspg.9E28FCE2 (BD 引擎)
最后一个算是bd的启 ...

貌似不是吧，BD启发好像是B开头的

显示全部楼层 · 发表于 2007-3-22 12:52:39

基因。。。。

显示全部楼层 · 发表于 2007-3-22 12:54:35

原帖由 EQ2 于 2007-3-22 12:45 发表
Upack？？？UPX？？

upack not upx

显示全部楼层 · 发表于 2007-3-22 13:26:57

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\wmv.rar'
C:\Documents and Settings\morgan\My Documents\
  wmv.rar
[0] Archive type: RAR
--> wmv.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\~tmp.rar'
C:\Documents and Settings\morgan\My Documents\
  ~tmp.rar
[0] Archive type: RAR
--> ~tmp.tmp
      [DETECTION] Is the Trojan horse TR/PSW.Delf.KH.1
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\down[1].rar'
C:\Documents and Settings\morgan\My Documents\
  down[1].rar
[0] Archive type: RAR
--> down[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.KH.1
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

[病毒样本] Kaspersky Anti-Virus Found nothing

本帖子中包含更多资源

nod32杀

本帖子中包含更多资源

回复 #6 pamier2001 的帖子