搜索
查看: 2188|回复: 11
收起左侧

[病毒样本] 两样本~`

[复制链接]
tonger2003
发表于 2007-3-27 15:29:01 | 显示全部楼层 |阅读模式
2

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
观弈书童
发表于 2007-3-27 15:32:53 | 显示全部楼层
C:\Documents and Settings\Administrator\桌面\病毒样本\样本文件\9b41ca488477de1d[1].rar ?RAR ?9b41ca488477de1d[1].exe - a variant of Win32/Agent.NEO 木马
The EQs
发表于 2007-3-27 15:34:12 | 显示全部楼层
Scan performed at: 2007-3-27 15:34:26
Scanning Log
NOD32 version 2146 (20070327) NT
Command line: C:\Documents and Settings\EQ2\桌面\avp[1].rar C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d[1].rar
Operating memory - is OK

Date: 27.3.2007  Time: 15:34:30
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\avp[1].rar; C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d[1].rar
C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d[1].rar ?RAR ?9b41ca488477de1d[1].exe - a variant of Win32/Agent.NEO trojan
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:34:31 Total scanning time: 1 sec (00:00:01)
uhthn2002
发表于 2007-3-27 17:03:07 | 显示全部楼层
VBA32
C:\Documents and Settings\tomcheung\Desktop\9b41ca488477de1d[1].rar : ok
C:\Documents and Settings\tomcheung\Desktop\avp[1].rar:<RAR>\avp[1].exe : infected MalwareScope.Worm.Viking.3
gggh
发表于 2007-3-27 17:34:28 | 显示全部楼层
卡巴不报警...
鼻耳盖子
发表于 2007-3-27 17:47:46 | 显示全部楼层

微点报未知间谍

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
solcroft
发表于 2007-3-27 17:56:13 | 显示全部楼层

Cyberhawk

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
蓝色牛仔裤
发表于 2007-3-27 18:07:59 | 显示全部楼层
Starting the file scan:

Begin scan in 'D:\9b41ca488477de1d[1].rar'
D:\9b41ca488477de1d[1].rar
  [0] Archive type: RAR
  --> 9b41ca488477de1d[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING]   The file was ignored!
Begin scan in 'D:\avp[1].rar'
D:\avp[1].rar
  [0] Archive type: RAR
  --> avp[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING]   The file was ignored!
蓝色牛仔裤
发表于 2007-3-27 18:10:45 | 显示全部楼层
Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-26
Start time: 2007-3-27 18:08
Engine(s): KAV engine (AVK 17.3548), AVAST-Engine (AVKB 17.181)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 9b41ca488477de1d[1].exe\[NsPack]
        In archive: D:\9b41ca488477de1d[1].rar
        Status: Virus detected
        Virus: Win32:Agent-ELK [Trj] (AVAST-Engine)
Object: 9b41ca488477de1d[1].rar
        Path: D:
        Status: Virus detected
        Virus: Win32:Agent-ELK [Trj] (AVAST-Engine)
Object: avp[1].exe
        In archive: D:\avp[1].rar
        Status: Virus detected
        Virus: Win32:Tibs-ADO [Trj] (AVAST-Engine)
Object: avp[1].rar
        Path: D:
        Status: Virus detected
        Virus: Win32:Tibs-ADO [Trj] (AVAST-Engine)
Analysis complete: 2007-3-27 18:08
    2 files checked
    2 infected files detected
    0 suspected files detected
kp2006
头像被屏蔽
发表于 2007-3-27 20:28:45 | 显示全部楼层
在 D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\9b41ca488477de1d[1].rar->9b41ca488477de1d[1].exe 中发现 Trojan/PSW.GamePass.cyw 病毒, 已删除
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛|卡饭乐购| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 苏ICP备07004770号 ) GMT+8, 2019-9-17 11:07 , Processed in 0.048401 second(s), 6 queries , MemCache On.

快速回复 返回顶部 返回列表