三样本

显示全部楼层 · 发表于 2007-3-24 16:08:48

3

[ 本帖最后由 tonger2003 于 2007-3-24 16:09 编辑 ]

显示全部楼层 · 发表于 2007-3-24 16:11:49

C:\Documents and Settings\Administrator\桌面\病毒样本\样本文件\xxz[1].rar ?RAR ?xxz[1].exe - 未查明的 NewHeur_PE 病毒 [7]

C:\Documents and Settings\Administrator\桌面\病毒样本\样本文件\getmonkkkk.rar ?RAR ?getmonkkkk.exe - 未查明的 NewHeur_PE 病毒 [7]

显示全部楼层 · 发表于 2007-3-24 16:12:12

Scan performed at: 2007-3-24 16:10:27
Scanning Log
NOD32 version 2141 (20070324) NT
Command line: C:\Documents and Settings\user\桌面\xxz[1].rar C:\Documents and Settings\user\桌面\getmonkkkk.rar C:\Documents and Settings\user\桌面\rss[1].rar
E:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK

Date: 24.3.2007 Time: 16:10:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\user\桌面\xxz[1].rar; C:\Documents and Settings\user\桌面\getmonkkkk.rar; C:\Documents and Settings\user\桌面\rss[1].rar
C:\Documents and Settings\user\桌面\xxz[1].rar ?RAR ?xxz[1].exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\user\桌面\getmonkkkk.rar ?RAR ?getmonkkkk.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\user\桌面\rss[1].rar ?RAR ?rss[1].dll - is OK
Number of scanned files: 5
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 16:10:40 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-3-24 16:14:46

对象: getmonkkkk.rar
病毒: Trojan.Agent.ANB (BD 引擎)
对象: xxz[1].rar
病毒: Trojan.Agent.ANB (BD 引擎)
第2个。。。

显示全部楼层 · 发表于 2007-3-24 16:26:33

dll无法分析，上报antiivr

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\xxz[1].rar'
C:\Documents and Settings\morgan\My Documents\
  xxz[1].rar
[0] Archive type: RAR
--> xxz[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\getmonkkkk.rar'
C:\Documents and Settings\morgan\My Documents\
  getmonkkkk.rar
[0] Archive type: RAR
--> getmonkkkk.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\rss[1].rar'
C:\Documents and Settings\morgan\My Documents\
  rss[1].rar
[0] Archive type: RAR
--> rss[1].dll

显示全部楼层 · 发表于 2007-3-24 16:27:39

大蜘蛛三个全都没报

显示全部楼层 · 发表于 2007-3-24 16:29:55

卡巴全飘过..

显示全部楼层 · 发表于 2007-3-24 16:31:45

驱逐舰不报

显示全部楼层 · 发表于 2007-3-24 16:32:29

2007年3月24日16时32分24秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\xxz[1]
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2007年3月24日16时32分24秒收起线程…100% 查杀完毕！
扫描文件：3查杀病毒：0

显示全部楼层 · 发表于 2007-3-24 17:42:55

卡巴不报

[病毒样本] 三样本

本帖子中包含更多资源