貌似是鸽子

显示全部楼层 · 发表于 2007-3-24 14:21:43

全球最伟大启发。。。
AntiVir Found TR/Crypt.NSPM.Gen
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found BackDoor.WebDor
F-Prot Antivirus Found Possibly a new variant of W32/NewMalware-BLP-based!Maximus
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found MalwareScope.Backdoor.Hupigon.3

[ 本帖最后由 mofunzone 于 2007-3-23 22:25 编辑 ]

显示全部楼层 · 发表于 2007-3-24 14:25:55

网速真慢, 下了这么久..

显示全部楼层 · 发表于 2007-3-24 14:26:38

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-24, 0:11

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\HMIMYS~1.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-24, 14:25:48
---------------------------------------------------------------------

[Found possible virus] <W32/NewMalware-BLP-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\HMIMYS~1.rar->HMIMYS~1.EXE
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\HMIMYS~1.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\HMIMYS~1.rar->HMIMYS~1.EXE

---------------------------------------------------------------------
Scan ended: 2007-3-24, 14:26:09
Duration: 0:00:21

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-3-24 14:27:29

原帖由 蓝色牛仔裤 于 2007-3-24 14:25 发表
网速真慢, 下了这么久..

AS犀牛上啊

显示全部楼层 · 发表于 2007-3-24 14:27:58

嘻嘻...再来......

显示全部楼层 · 发表于 2007-3-24 14:30:49

应该报的都报了...]

Starting the file scan:

Begin scan in 'D:\掃描\HMIMYS~1.rar'
D:\掃描\HMIMYS~1.rar
  [0] Archive type: RAR
  --> HMIMYS~1.EXE
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-24 14:34:57

NOD32不报，生成一IE进程，在任务管理器中就可以停掉，不象鸽子。

显示全部楼层 · 发表于 2007-3-24 14:44:43

鸽子？？？？红伞明明是报壳。。。

显示全部楼层 · 发表于 2007-3-24 14:45:19

原帖由 EQ2 于 2007-3-23 22:44 发表
鸽子？？？？红伞明明是报壳。。。

鸽子？？？？nod明明就是不报。。。

显示全部楼层 · 发表于 2007-3-24 14:46:47

明明就不是鸽子。。。。vba32乱报的。。。。随便加一个仙剑壳vba32都报鸽子。。。vba32看来很讨厌鸽子。。。。

[病毒样本] 貌似是鸽子

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源