样本

显示全部楼层 · 发表于 2007-3-24 02:27:37

Starting the file scan:

Begin scan in 'C:\Documents and Settings\znzm52\桌面\svchost.rar'
C:\Documents and Settings\znzm52\桌面\svchost.rar
  [0] Archive type: RAR
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was moved to '46671c72.qua'!

显示全部楼层 · 发表于 2007-3-24 02:27:43

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\svchost.rar'
C:\Documents and Settings\morgan\My Documents\
  svchost.rar
[0] Archive type: RAR
--> svchost.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
AntiVir Found TR/Crypt.NSPM.Gen
ArcaVir Found nothing
Avast Found Win32:Tibs-ADO
AVG Antivirus Found nothing
BitDefender Found GenPack:Win32.Worm.Viking.IZ
ClamAV Found nothing
Dr.Web Found Win32.HLLW.Gavir.54
F-Prot Antivirus Found Possibly a new variant of W32/PWStealer.gen1
F-Secure Anti-Virus Found nothing
Fortinet Found PossibleThreat
Kaspersky Anti-Virus Found nothing
NOD32 Found Win32/Pacex.Gen
Norman Virus Control Found nothing
Panda Antivirus Found nothing
VirusBuster Found Packed/NSPM
VBA32 Found MalwareScope.Worm.Viking.3

显示全部楼层 · 发表于 2007-3-24 02:36:45

Cyberhawk

显示全部楼层 · 发表于 2007-3-24 02:40:30

显示全部楼层 · 发表于 2007-3-24 02:41:32

Scan performed at: 2007-3-24 2:41:49
Scanning Log
NOD32 version 2140 (20070323) NT
Command line: C:\Documents and Settings\EQ2\桌面\svchost.rar
Operating memory - is OK

Date: 24.3.2007 Time: 02:41:54
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\svchost.rar
C:\Documents and Settings\EQ2\桌面\svchost.rar ?RAR ?svchost.exe - Win32/Pacex.Gen virus
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 02:41:54 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-24 04:38:57

KIS6还是没反应...

显示全部楼层 · 发表于 2007-3-24 09:50:45

蜘蛛来了....

显示全部楼层 · 发表于 2007-3-24 09:51:37

继续是BD杀的, kav哑火..

Check system areas...
Check selected directories and files...
Object: svchost.exe
In archive: D:\svchost.rar
Status: Virus detected
Virus: GenPack:Win32.Worm.Viking.IZ (BD-Engine)
Object: svchost.rar
Path: D:
Status: Virus detected
Virus: GenPack:Win32.Worm.Viking.IZ (BD-Engine)
Analysis complete: 2007-3-24 9:50
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-24 09:53:16

不错,不错...

[病毒样本] 样本

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源