样本两个

tonger2003

2

znzm52

--> smss.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46771d0e.qua'!

--> csrss.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680.32
      [INFO]      The file was moved to '46761d0d.qua'!

蓝色牛仔裤

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-22
Start time: 2007-3-24 2:30
Engine(s): KAV engine (AVK 17.3463), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: csrss.exe
        In archive: D:\csrss.rar
        Status: Virus detected
        Virus: DeepScan:Generic.Malware.dld!!.A900E3B4 (BD-Engine)
Object: csrss.rar
        Path: D:
        Status: Virus detected
        Virus: DeepScan:Generic.Malware.dld!!.A900E3B4 (BD-Engine)
Analysis complete: 2007-3-24 2:30
    2 files checked
    1 infected files detected
    0 suspected files detected

蓝色牛仔裤

最近蜘蛛的表现不错.....

蓝色牛仔裤

犀牛也来凑凑热闹....启动快了,心情真是爽啊~

蓝色牛仔裤

睡觉喽~~同志们继续加油!!!

绅博周幸

大家给看看

The EQs

Scan performed at: 2007-3-24 2:40:20
Scanning Log
NOD32 version 2140 (20070323) NT
Command line: C:\Documents and Settings\EQ2\桌面\smss.rar C:\Documents and Settings\EQ2\桌面\csrss.rar
Operating memory - is OK

Date: 24.3.2007  Time: 02:40:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\smss.rar; C:\Documents and Settings\EQ2\桌面\csrss.rar
C:\Documents and Settings\EQ2\桌面\smss.rar ?RAR ?smss.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\csrss.rar ?RAR ?csrss.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 02:40:29 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

icka

周末还不着急哈

dericyeoh

KIS6 621没反应