两样本~`

显示全部楼层 · 发表于 2007-3-27 15:32:53

C:\Documents and Settings\Administrator\桌面\病毒样本\样本文件\9b41ca488477de1d[1].rar ?RAR ?9b41ca488477de1d[1].exe - a variant of Win32/Agent.NEO 木马

显示全部楼层 · 发表于 2007-3-27 15:34:12

Scan performed at: 2007-3-27 15:34:26
Scanning Log
NOD32 version 2146 (20070327) NT
Command line: C:\Documents and Settings\EQ2\桌面\avp[1].rar C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d[1].rar
Operating memory - is OK

Date: 27.3.2007 Time: 15:34:30
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\avp[1].rar; C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d[1].rar
C:\Documents and Settings\EQ2\桌面\9b41ca488477de1d[1].rar ?RAR ?9b41ca488477de1d[1].exe - a variant of Win32/Agent.NEO trojan
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:34:31 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-3-27 17:03:07

VBA32
C:\Documents and Settings\tomcheung\Desktop\9b41ca488477de1d[1].rar : ok
C:\Documents and Settings\tomcheung\Desktop\avp[1].rar:<RAR>\avp[1].exe : infected MalwareScope.Worm.Viking.3

显示全部楼层 · 发表于 2007-3-27 17:34:28

卡巴不报警...

显示全部楼层 · 发表于 2007-3-27 17:47:46

显示全部楼层 · 发表于 2007-3-27 17:56:13

显示全部楼层 · 发表于 2007-3-27 18:07:59

Starting the file scan:

Begin scan in 'D:\9b41ca488477de1d[1].rar'
D:\9b41ca488477de1d[1].rar
  [0] Archive type: RAR
  --> 9b41ca488477de1d[1].exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
   [WARNING] The file was ignored!
Begin scan in 'D:\avp[1].rar'
D:\avp[1].rar
  [0] Archive type: RAR
  --> avp[1].exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-27 18:10:45

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-26
Start time: 2007-3-27 18:08
Engine(s): KAV engine (AVK 17.3548), AVAST-Engine (AVKB 17.181)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 9b41ca488477de1d[1].exe\[NsPack]
In archive: D:\9b41ca488477de1d[1].rar
Status: Virus detected
Virus: Win32:Agent-ELK [Trj] (AVAST-Engine)
Object: 9b41ca488477de1d[1].rar
Path: D:
Status: Virus detected
Virus: Win32:Agent-ELK [Trj] (AVAST-Engine)
Object: avp[1].exe
In archive: D:\avp[1].rar
Status: Virus detected
Virus: Win32:Tibs-ADO [Trj] (AVAST-Engine)
Object: avp[1].rar
Path: D:
Status: Virus detected
Virus: Win32:Tibs-ADO [Trj] (AVAST-Engine)
Analysis complete: 2007-3-27 18:08
2 files checked
2 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-27 20:28:45

在 D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\9b41ca488477de1d[1].rar->9b41ca488477de1d[1].exe 中发现 Trojan/PSW.GamePass.cyw 病毒, 已删除

[病毒样本] 两样本~`

本帖子中包含更多资源

微点报未知间谍

本帖子中包含更多资源

Cyberhawk

本帖子中包含更多资源