两个样本~~~

显示全部楼层 · 发表于 2007-3-23 15:35:02

两个样本~~~

显示全部楼层 · 发表于 2007-3-23 15:38:44

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\sing494.rar'
C:\Documents and Settings\morgan\My Documents\
  sing494.rar
[0] Archive type: RAR
--> sing494.exe
      [DETECTION] Is the Trojan horse TR/Spy.Viking.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\r774.rar'
C:\Documents and Settings\morgan\My Documents\
  r774.rar
[0] Archive type: RAR
--> r774.exe
      [DETECTION] Is the Trojan horse TR/Spy.Viking.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-23 15:55:34

Scan performed at: 2007-3-23 15:55:47
Scanning Log
NOD32 version 2138 (20070323) NT
Command line: C:\Documents and Settings\EQ2\桌面\sing494.rar C:\Documents and Settings\EQ2\桌面\r774.rar
Operating memory - is OK

Date: 23.3.2007 Time: 15:55:51
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\sing494.rar; C:\Documents and Settings\EQ2\桌面\r774.rar
C:\Documents and Settings\EQ2\桌面\sing494.rar ?RAR ?sing494.exe - probably a variant of Win32/Viking virus
C:\Documents and Settings\EQ2\桌面\r774.rar ?RAR ?r774.exe - probably a variant of Win32/Viking virus
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 15:55:52 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-3-23 16:03:23

R774.RAR
AntiVir 7.3.1.44 03.22.2007 TR/Spy.Viking.Gen
Authentium 4.93.8 03.22.2007 Possibly a new variant of W32/CrazyCrunch-based!Maximus
Avast 4.7.936.0 03.22.2007 Win32:Viking-Z
BitDefender 7.2 03.23.2007 BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal 9.00 03.22.2007 (Suspicious) - DNAScan
DrWeb 4.33 03.23.2007 Win32.HLLW.Gavir.62
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
Ewido 4.0 03.22.2007 Worm.Viking.bb
Fortinet 2.85.0.0 03.23.2007 W32/Viking.BC
F-Secure 6.70.13030.0 03.23.2007 W32/Viking.EQ
Ikarus T3.1.1.3 03.23.2007 Trojan-Spy.Win32.Agent.hz
McAfee 4990 03.22.2007 W32/HLLP.Philis.bd
Microsoft 1.2306 03.23.2007 Virus:Win32/Viking.gen!B
NOD32v2 2138 03.23.2007 probably a variant of Win32/Viking
Panda 9.0.0.4 03.22.2007 Suspicious file
Sophos 4.15.0 03.23.2007 W32/Looked-Gen
Sunbelt 2.2.907.0 03.22.2007 VIPRE.Suspicious
Symantec 10 03.23.2007 W32.Looked.P
TheHacker 6.1.6.080 03.23.2007 W32/Philis.gen
UNA 1.83 03.16.2007 Worm.Win32.Viking.bb
VBA32 3.11.2 03.22.2007 MalwareScope.Worm.Viking.5
VirusBuster 4.3.7:9 03.22.2007 Win32.HLLP.Viking.Gen.2
Webwasher-Gateway 6.0.1 03.23.2007 Trojan.Spy.Viking.Gen

sing494.rar
AntiVir 7.3.1.44 03.22.2007 TR/Spy.Viking.Gen
Authentium 4.93.8 03.22.2007 Possibly a new variant of W32/CrazyCrunch-based!Maximus
Avast 4.7.936.0 03.22.2007 Win32:Viking-Z
BitDefender 7.2 03.23.2007 BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal 9.00 03.22.2007 (Suspicious) - DNAScan
DrWeb 4.33 03.23.2007 Win32.HLLW.Gavir.62
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
Ewido 4.0 03.22.2007 Worm.Viking.bb
Fortinet 2.85.0.0 03.23.2007 W32/Viking.BC
F-Secure 6.70.13030.0 03.23.2007 W32/Viking.EQ
Ikarus T3.1.1.3 03.23.2007 Trojan-Spy.Win32.Agent.hz
McAfee 4990 03.22.2007 W32/HLLP.Philis.bd
Microsoft 1.2306 03.23.2007 Virus:Win32/Viking.gen!B
NOD32v2 2138 03.23.2007 probably a variant of Win32/Viking
Panda 9.0.0.4 03.22.2007 Suspicious file
Sophos 4.15.0 03.23.2007 W32/Looked-Gen
Sunbelt 2.2.907.0 03.22.2007 VIPRE.Suspicious
Symantec 10 03.23.2007 W32.Looked.P
TheHacker 6.1.6.080 03.23.2007 W32/Philis.gen
UNA 1.83 03.16.2007 Worm.Win32.Viking.bb
VBA32 3.11.2 03.22.2007 MalwareScope.Worm.Viking.5
VirusBuster 4.3.7:9 03.22.2007 Win32.HLLP.Viking.Gen.2
Webwasher-Gateway 6.0.1 03.23.2007 Trojan.Spy.Viking.Gen

显示全部楼层 · 发表于 2007-3-23 16:10:34

卡巴就这样飘过了~~~

显示全部楼层 · 发表于 2007-3-23 16:58:20

２个样本在下载中被驱逐舰干掉！

显示全部楼层 · 发表于 2007-3-23 17:14:52

是威金？我怎么没蓝屏...

显示全部楼层 · 发表于 2007-3-23 18:05:08

扫描系统区域...
扫描所选择的目录和文件...
对象: sing494.exe
在压缩档案里: F:\新建文件夹 (4)\sing494.rar
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD 引擎)
对象: sing494.rar
路径: F:\新建文件夹 (4)
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD 引擎)
对象: r774.exe
在压缩档案里: F:\新建文件夹 (4)\r774.rar
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD 引擎)
对象: r774.rar
路径: F:\新建文件夹 (4)
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD 引擎)
扫描完成: 2007-3-23 18:05
已检查 2 个文件

显示全部楼层 · 发表于 2007-3-23 19:44:18

McAfee 已自動封鎖並移除病毒。

詳細資料
偵測: W32/HLLP.Philis.bd (病毒), W32/HLLP.Philis.bd (病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\r774.exe

詳細資料
偵測: W32/HLLP.Philis.bd (病毒), W32/HLLP.Philis.bd (病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\sing494.exe

显示全部楼层 · 发表于 2007-3-23 19:56:31

DUBA2007杀!!!

[病毒样本] 两个样本~~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块