看来卡巴危险了－－转绅博molicn（17个样本）

显示全部楼层 · 发表于 2007-3-22 13:08:07

来自国土资源局的样本，里面17个病毒，卡巴全过（可能现在能杀几个了吧），国土资源局装卡巴的那台电脑看来也在养毒啊，这么多样本卡巴都没有反应，看来卡巴危险了

显示全部楼层 · 发表于 2007-3-22 13:10:32

Scan performed at: 2007-3-22 13:09:05
Scanning Log
NOD32 version 2134 (20070322) NT
Command line: C:\Documents and Settings\user\桌面\卡巴免杀.rar
E:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK

Date: 22.3.2007 Time: 13:09:13
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\user\桌面\卡巴免杀.rar
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?4.exe - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?5.exe - Win32/Adware.CDN application - was a part of the deleted object
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?6.DLL - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?7.dll - is OK
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?8.exe - Win32/Adware.Toolbar.Baidu application - was a part of the deleted object
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?9.exe - Win32/TrojanClicker.VB.PN trojan - was a part of the deleted object
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?10.exe - a variant of Win32/TrojanDownloader.Delf.NJH trojan
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?11.dll - is OK
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?12.EXE - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?13.exe - Win32/Adware.Toolbar.Baidu application - was a part of the deleted object
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?14.EXE - is OK
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?15.DLL - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?16.EXE - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?17.exe - Win32/TrojanDownloader.QQHelper.NAU trojan - was a part of the deleted object
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?1.exe - a variant of Win32/Agent.NAU worm
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?2.exe - a variant of Win32/PSW.Agent.NBX trojan
C:\Documents and Settings\user\桌面\卡巴免杀.rar ?RAR ?3.exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 18
Number of threats found: 14
Number of files cleaned: 1
Time of completion: 13:09:22 Total scanning time: 9 sec (00:00:09)

显示全部楼层 · 发表于 2007-3-22 13:10:38

Scan performed at: 2007-3-22 13:10:38
Scanning Log
NOD32 version 2134 (20070322) NT
Command line: C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar
Operating memory - is OK

Date: 22.3.2007 Time: 13:10:42
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?4.exe - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?5.exe - Win32/Adware.CDN application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?6.DLL - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?8.exe - Win32/Adware.Toolbar.Baidu application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?9.exe - Win32/TrojanClicker.VB.PN trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?10.exe - a variant of Win32/TrojanDownloader.Delf.NJH trojan
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?12.EXE - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?13.exe - Win32/Adware.Toolbar.Baidu application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?15.DLL - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?16.EXE - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?17.exe - Win32/TrojanDownloader.QQHelper.NAU trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?1.exe - a variant of Win32/Agent.NAU worm
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?2.exe - a variant of Win32/PSW.Agent.NBX trojan
C:\Documents and Settings\EQ2\桌面\复件卡巴免杀.rar ?RAR ?3.exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 18
Number of threats found: 14
Number of files cleaned: 1
Time of completion: 13:10:48 Total scanning time: 6 sec (00:00:06)

剩下几个运行看看。。。

显示全部楼层 · 发表于 2007-3-22 13:12:11

看来楼主没体会过卡巴主动防御绝对不在微点之下的威力

显示全部楼层 · 发表于 2007-3-22 13:12:55

剩下3个运行未报。。。上报去了。。。。

显示全部楼层 · 发表于 2007-3-22 13:13:19

7.dll - is OK
11.dll - is OK
14.EXE - is OK

貌似这3个过了NOD32

显示全部楼层 · 发表于 2007-3-22 13:16:38

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-22, 3:55

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-22, 13:15:28
---------------------------------------------------------------------

[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar->8.exe
[Found possible virus] <W32/Downloader-Sml-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar->10.exe
[Found possible virus] <W32/SelfStarterInternetTrojan!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar->13.exe
[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar->15.DLL->(embedded)
[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar->2.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\卡巴免杀.rar->3.exe

---------------------------------------------------------------------
Scan ended: 2007-3-22, 13:16:04
Duration: 0:00:36

Scan result:

Scanned files:    1
Infected objects:    5
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-3-22 13:17:26

F-prot。。。。。。。LS的咋用了这个？？？？

显示全部楼层 · 发表于 2007-3-22 13:20:47

因为我看样本区木有人用

显示全部楼层 · 发表于 2007-3-22 13:22:15

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\��ɱ.rar'
C:\Documents and Settings\morgan\My Documents\
  ��ɱ.rar
[0] Archive type: RAR
--> 4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 5.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.1
      [WARNING] Infected files in archives cannot be repaired!
--> 6.DLL
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> 7.dll
--> 8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 10.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 11.dll
--> 12.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 13.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 14.EXE
      [DETECTION] Is the Trojan horse TR/Dldr.Agen.795136
      [WARNING] Infected files in archives cannot be repaired!
--> 15.DLL
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> 16.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 17.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.aym.15
      [WARNING] Infected files in archives cannot be repaired!
--> 1.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.atw.4
      [WARNING] Infected files in archives cannot be repaired!
--> 2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年3月21日  22:21
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   18 Files were scanned
   15 viruses and/or unwanted programs were found
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   16 Warnings
   0 Notes

[病毒样本] 看来卡巴危险了－－转绅博molicn（17个样本）

本帖子中包含更多资源

回复 #8 EQ2 的帖子