四个样本~~~

显示全部楼层 · 发表于 2007-3-24 00:44:17

四个样本~~~

显示全部楼层 · 发表于 2007-3-24 00:46:24

Scan performed at: 2007-3-24 0:46:39
Scanning Log
NOD32 version 2140 (20070323) NT
Command line: C:\Documents and Settings\EQ2\桌面\mumu3.rar C:\Documents and Settings\EQ2\桌面\mumu4.rar C:\Documents and Settings\EQ2\桌面\mumu5.rar C:\Documents and Settings\EQ2\桌面\mumu6.rar
Operating memory - is OK

Date: 24.3.2007 Time: 00:46:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\mumu3.rar; C:\Documents and Settings\EQ2\桌面\mumu4.rar; C:\Documents and Settings\EQ2\桌面\mumu5.rar; C:\Documents and Settings\EQ2\桌面\mumu6.rar
C:\Documents and Settings\EQ2\桌面\mumu3.rar ?RAR ?mumu3.exe - probably a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\mumu4.rar ?RAR ?mumu4.exe - a variant of Win32/PSW.Agent.NDF trojan
C:\Documents and Settings\EQ2\桌面\mumu5.rar ?RAR ?mumu5.exe - probably a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 8
Number of threats found: 3
Number of files cleaned: 3
Time of completion: 00:46:45 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-24 00:48:08

扫描器乱杀一通

显示全部楼层 · 发表于 2007-3-24 00:50:57

卡巴拦住最后一个已检测到: 广告程序 not-a-virus:AdWare.Win32.Delf.g URL: bbs.kafan.cn/attachment.php?aid=46771/mumu6.exe/FSG

大蜘蛛报 mumu3

[ 本帖最后由 200530040058 于 2007-3-24 00:52 编辑 ]

显示全部楼层 · 发表于 2007-3-24 00:54:04

蜘蛛只有一个..

显示全部楼层 · 发表于 2007-3-24 00:55:27

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-22
Start time: 2007-3-24 0:53
Engine(s): KAV engine (AVK 17.3463), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: mumu6.exe
In archive: D:\mumu6.rar
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Delf.g (KAV engine)
Object: mumu6.rar
Path: D:
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Delf.g (KAV engine)
Object: mumu3.exe
In archive: D:\mumu3.rar
Status: Virus detected
Virus: Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: mumu3.rar
Path: D:
Status: Virus detected
Virus: Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: mumu4.exe
In archive: D:\mumu4.rar
Status: Suspected virus
Virus: GenPack:Generic.Malware.Sdld.B6EF59BB (BD-Engine)
Object: mumu4.rar
Path: D:
Status: Suspected virus
Virus: GenPack:Generic.Malware.Sdld.B6EF59BB (BD-Engine)
Object: mumu5.exe
In archive: D:\mumu5.rar
Status: Virus detected
Virus: Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: mumu5.rar
Path: D:
Status: Virus detected
Virus: Trojan.PWS.OnLineGames.ARI (BD-Engine)
Analysis complete: 2007-3-24 0:53
4 files checked
3 infected files detected
1 suspected files detected

显示全部楼层 · 发表于 2007-3-24 01:17:16

Cyberhawk通杀，最后一个样本利用regsvr32.exe试图修改IE设置，看来世界最强启发又漏杀了一个有效样本

显示全部楼层 · 发表于 2007-3-24 01:42:28

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\mumu6.rar'
C:\Documents and Settings\morgan\My Documents\
  mumu6.rar
[0] Archive type: RAR
--> mumu6.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\mumu3.rar'
C:\Documents and Settings\morgan\My Documents\
  mumu3.rar
[0] Archive type: RAR
--> mumu3.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\mumu4.rar'
C:\Documents and Settings\morgan\My Documents\
  mumu4.rar
[0] Archive type: RAR
--> mumu4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\mumu5.rar'
C:\Documents and Settings\morgan\My Documents\
  mumu5.rar
[0] Archive type: RAR
--> mumu5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-24 09:43:18

原帖由 <i>solcroft</i> 于 2007-3-24 01:17 发表<br />
Cyberhawk通杀，最后一个样本利用regsvr32.exe试图修改IE设置，看来世界最强启发又漏杀了一个有效样本

<br />
最后一个叫做malware，既不是病毒也不是木马，任何一个有基本anti-spyware功能的软件都可以防御。

显示全部楼层 · 发表于 2007-3-24 10:24:36

驱逐舰３号样本杀（其他挂）．小红伞３、４、５号样本通杀！（６号未试）．

[病毒样本] 四个样本~~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源