四样本~~

显示全部楼层 · 发表于 2007-3-24 14:36:16

四样本~~

显示全部楼层 · 发表于 2007-3-24 14:39:29

Scan performed at: 2007-3-24 14:39:38
Scanning Log
NOD32 version 2141 (20070324) NT
Command line: C:\Documents and Settings\EQ2\桌面\~tmp.rar C:\Documents and Settings\EQ2\桌面\miyu03.rar C:\Documents and Settings\EQ2\桌面\nk520.rar C:\Documents and Settings\EQ2\桌面\xxxx.rar
Operating memory - is OK

Date: 24.3.2007 Time: 14:39:42
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\~tmp.rar; C:\Documents and Settings\EQ2\桌面\miyu03.rar; C:\Documents and Settings\EQ2\桌面\nk520.rar; C:\Documents and Settings\EQ2\桌面\xxxx.rar
C:\Documents and Settings\EQ2\桌面\~tmp.rar ?RAR ?~tmp.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\miyu03.rar ?RAR ?miyu03.exe - a variant of Win32/Agent.NAU worm
Number of scanned files: 8
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 14:39:45 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-3-24 14:39:32

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-22
Start time: 2007-3-24 14:38
Engine(s): KAV engine (AVK 17.3463), BD-Engine (BD 17.5838)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: ~tmp.exe
In archive: D:\掃描\~tmp.rar
Status: Virus detected
Virus: GenPack:Win32.Worm.Viking.IZ (BD-Engine)
Object: ~tmp.rar
Path: D:\掃描
Status: Virus detected
Virus: GenPack:Win32.Worm.Viking.IZ (BD-Engine)
Object: xxxx.exe
In archive: D:\掃描\xxxx.rar
Status: Suspected virus
Virus: Trojan.Downloader.Gen (BD-Engine)
Object: xxxx.rar
Path: D:\掃描
Status: Suspected virus
Virus: Trojan.Downloader.Gen (BD-Engine)
Analysis complete: 2007-3-24 14:38
4 files checked
1 infected files detected
1 suspected files detected

显示全部楼层 · 发表于 2007-3-24 14:40:32

漏掉了一个。。

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\xxxx.rar'
C:\Documents and Settings\morgan\My Documents\
  xxxx.rar
[0] Archive type: RAR
--> xxxx.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\~tmp.rar'
C:\Documents and Settings\morgan\My Documents\
  ~tmp.rar
[0] Archive type: RAR
--> ~tmp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\miyu03.rar'
C:\Documents and Settings\morgan\My Documents\
  miyu03.rar
[0] Archive type: RAR
--> miyu03.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.atw.4
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\nk520.rar'
C:\Documents and Settings\morgan\My Documents\
  nk520.rar
[0] Archive type: RAR
--> nk520.exe

显示全部楼层 · 发表于 2007-3-24 14:41:06

nk520里面的东西
<html>
<head>
<title>卡巴斯基反病毒 7.0 测试版</title>
</head>
<body>
<h1>卡巴斯基反病毒 7.0 测试版</h1>
<p>The requested URL <u>http://jipin.818qq.cn/nk/nk520.exe</u> is forbidden</p>
</body>
</html>

显示全部楼层 · 发表于 2007-3-24 14:42:02

微点报警了。。。。。。

为什么那个XXXX占CPU呢有点怪。。。。难道是系统有问题拉！！！

显示全部楼层 · 发表于 2007-3-24 14:43:15

真正的nk520

显示全部楼层 · 发表于 2007-3-24 14:45:39

Scan performed at: 2007-3-24 14:45:55
Scanning Log
NOD32 version 2141 (20070324) NT
Command line: C:\Documents and Settings\EQ2\桌面\nk520.rar
Operating memory - is OK

Date: 24.3.2007 Time: 14:45:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\nk520.rar
C:\Documents and Settings\EQ2\桌面\nk520.rar ?RAR ?nk520.exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:46:00 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-3-24 14:46:10

Object: nk520.exe
In archive: D:\掃描\nk520.rar
Status: Virus detected
Virus: Backdoor.Win32.Agent.ahj (KAV engine), Backdoor.Hupigon.YBJ (BD-Engine)

显示全部楼层 · 发表于 2007-3-24 16:56:08

驱逐舰一个

[病毒样本] 四样本~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源