来两个大家玩玩

Anycall-D908

有个傻瓜说自己是黑客要黑我的电脑,发过来的.都不知道是什么鬼东西

Anycall-D908

第二个

Anycall-D908

谁告诉我怎么一次把两个附件发上来啊?

蓝色牛仔裤

"桌面"有反应...

mofunzone

只是生成了一个文件，其他行为我这里没的分析，等微点和cyberhawk，上报antivir

观弈书童

C:\Documents and Settings\Administrator\桌面\病毒样本\样本文件\桌面.rar ?RAR ?ThankYou.exe - Win32/Viking.CH 病毒

aoyang

黑客
费尔报告：Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-3-27 14:17:04,W32.Viking.k,病毒,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>~tmp9085.exe,Manual scan
2007-3-27 14:17:04,Worm.Viking.du.txi,病毒,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>ThankYou.exe,Manual scan

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\����.rar'
C:\Documents and Settings\morgan\My Documents\
  ����.rar
    [0] Archive type: RAR
    --> ~tmp9085.exe
        [DETECTION] Is the Trojan horse TR/Drop.Lineag.WO.4
        [WARNING]   Infected files in archives cannot be repaired!
    --> ThankYou.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

蓝色牛仔裤

原帖由 Anycall-D908 于 2007-3-27 14:14 发表
谁告诉我怎么一次把两个附件发上来啊?

点这个...

The EQs

Scan performed at: 2007-3-27 14:19:33
Scanning Log
NOD32 version 2146 (20070327) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面.rar C:\Documents and Settings\EQ2\桌面\2.rar
Operating memory - is OK

Date: 27.3.2007  Time: 14:19:38
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面.rar; C:\Documents and Settings\EQ2\桌面\2.rar
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?~tmp9085.exe - Win32/Viking.CR virus - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?ThankYou.exe - Win32/Viking.CH virus - was a part of the deleted object
Number of scanned files: 5
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 14:19:38 Total scanning time: 0 sec (00:00:00)