两个样本

显示全部楼层 · 发表于 2007-3-23 15:06:55

两个样本

显示全部楼层 · 发表于 2007-3-23 15:10:32

卡巴两个都干掉了

显示全部楼层 · 发表于 2007-3-23 15:10:43

Scan performed at: 2007-3-23 15:10:39
Scanning Log
NOD32 version 2138 (20070323) NT
Command line: C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d.rar C:\Documents and Settings\EQ2\桌面\avp.rar
Operating memory - is OK

Date: 23.3.2007 Time: 15:10:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d.rar; C:\Documents and Settings\EQ2\桌面\avp.rar
C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d.rar ?RAR ?9b41ca488477de1d.exe - a variant of Win32/Agent.NEO trojan
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:10:50 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-3-23 15:11:58

晕了。。。avp.exe运行了一下。。。结果电脑没声音了。。。

显示全部楼层 · 发表于 2007-3-23 15:12:22

2007-3-23 15:09:21 文件 C:\Documents and Settings\IBM\桌面\9b41ca488477de1d.rar\9b41ca488477de1d.exe: 检测到木马程序 Backdoor.Win32.Agent.ahj

2007-3-23 15:09:39 文件 C:\Documents and Settings\IBM\桌面\avp.rar\avp.exe: 检测到木马程序 Trojan-PSW.Win32.Nilage.bcq

显示全部楼层 · 发表于 2007-3-23 15:41:34

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\avp.rar'
C:\Documents and Settings\morgan\My Documents\
  avp.rar
[0] Archive type: RAR
--> avp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\9b41ca488477de1d.rar'
C:\Documents and Settings\morgan\My Documents\
  9b41ca488477de1d.rar
[0] Archive type: RAR
--> 9b41ca488477de1d.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-23 15:46:54

9b41ca488477de1d.rar

AntiVir 7.3.1.44 03.22.2007 TR/Crypt.FKM.Gen
Avast 4.7.936.0 03.22.2007 Win32:Agent-ELK
CAT-QuickHeal 9.00 03.22.2007 (Suspicious) - DNAScan
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
Ewido 4.0 03.22.2007 Backdoor.Agent.ahj
Fortinet 2.85.0.0 03.23.2007 W32/Agent.AHJ!tr.bdr
F-Secure 6.70.13030.0 03.23.2007 Backdoor.Win32.Agent.ahj
Ikarus T3.1.1.3 03.23.2007 Backdoor.Win32.Hupigon.BV
Kaspersky 4.0.2.24 03.23.2007 Backdoor.Win32.Agent.ahj
Microsoft 1.2306 03.23.2007 VirTool:Win32/Obfuscator.A
NOD32v2 2138 03.23.2007 a variant of Win32/Agent.NEO
Panda 9.0.0.4 03.22.2007 Suspicious file
Sunbelt 2.2.907.0 03.22.2007 VIPRE.Suspicious
TheHacker 6.1.6.080 03.23.2007 Backdoor/Agent.ahj
VBA32 3.11.2 03.22.2007 Backdoor.Win32.Agent.ahj
Webwasher-Gateway 6.0.1 03.23.2007 Trojan.Crypt.FKM.Gen

AVP.RAR

Authentium 4.93.8 03.22.2007 could be a corrupted executable file
Avast 4.7.936.0 03.22.2007 Win32:Tibs-ADO
Fortinet 2.85.0.0 03.23.2007 PossibleThreat
F-Prot 4.3.1.45 03.23.2007 File is damaged
F-Secure 6.70.13030.0 03.23.2007 Trojan-PSW.Win32.Nilage.bcq
Ikarus T3.1.1.3 03.23.2007 MalwareScope.Worm.Viking.3
Kaspersky 4.0.2.24 03.23.2007 Trojan-PSW.Win32.Nilage.bcq
NOD32v2 2138 03.23.2007 archive damaged

[ 本帖最后由 a750828 于 2007-3-23 15:49 编辑 ]

显示全部楼层 · 发表于 2007-3-23 15:50:35

那个avp老想连网寒
bd没查出毒就是知道它要联网

显示全部楼层 · 发表于 2007-3-23 18:03:01

Cyberhawk

显示全部楼层 · 发表于 2007-3-23 18:08:34

扫描系统区域...
扫描所选择的目录和文件...
对象: avp.exe
在压缩档案里: F:\新建文件夹 (4)\avp.rar
Status: 已发现病毒
病毒: Trojan-PSW.Win32.Nilage.bcq (KAV 引擎)
对象: avp.rar
路径: F:\新建文件夹 (4)
Status: 已发现病毒
病毒: Trojan-PSW.Win32.Nilage.bcq (KAV 引擎)
对象: 9b41ca488477de1d.exe
在压缩档案里: F:\新建文件夹 (4)\9b41ca488477de1d.rar
Status: 已发现病毒
病毒: Backdoor.Win32.Agent.ahj (KAV 引擎)
对象: 9b41ca488477de1d.rar
路径: F:\新建文件夹 (4)
Status: 已发现病毒
病毒: Backdoor.Win32.Agent.ahj (KAV 引擎)
扫描完成: 2007-3-23 18:08
已检查 2 个文件
已发现 2 个染毒文件
发现 0 个可疑文件

[病毒样本] 两个样本

本帖子中包含更多资源

本帖子中包含更多资源