2样本

显示全部楼层 · 发表于 2007-3-28 14:29:53

Scan performed at: 2007-3-28 14:30:00
Scanning Log
NOD32 version 2148 (20070327) NT
Command line: C:\Documents and Settings\EQ2\桌面\1.rar C:\Documents and Settings\EQ2\桌面\0.rar
Operating memory - is OK

Date: 28.3.2007 Time: 14:30:08
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\1.rar; C:\Documents and Settings\EQ2\桌面\0.rar
C:\Documents and Settings\EQ2\桌面\0.rar ?RAR ?0.exe - a variant of Win32/Agent.NEO trojan
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:30:09 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-3-28 14:34:02

vba32

C:\Documents and Settings\tomcheung\Desktop\0.rar : ok
C:\Documents and Settings\tomcheung\Desktop\1.rar:<RAR>\1.exe : infected MalwareScope.Worm.Viking.3

显示全部楼层 · 发表于 2007-3-28 14:40:03

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\1.rar'
C:\Documents and Settings\morgan\My Documents\
  1.rar
[0] Archive type: RAR
--> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\0.rar'
C:\Documents and Settings\morgan\My Documents\
  0.rar
[0] Archive type: RAR
--> 0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-28 14:45:33

C:\Documents and Settings\Administrator\桌面\病毒样本\样本文件\0.rar ?RAR ?0.exe - a variant of Win32/Agent.NEO 木马

显示全部楼层 · 发表于 2007-3-28 16:09:35

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-28, 15:12

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\1.rar|C:\Documents and Settings\Administrator\桌面\0.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-28, 16:09:16
---------------------------------------------------------------------

[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\1.rar->1.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\1.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\1.rar->1.exe

---------------------------------------------------------------------
Scan ended: 2007-3-28, 16:09:21
Duration: 0:00:05

Scan result:

Scanned files:    2
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-3-28 16:38:18

显示全部楼层 · 发表于 2007-3-28 18:48:39

显示全部楼层 · 发表于 2007-3-28 18:57:44

显示全部楼层 · 发表于 2007-3-28 19:15:20

卡巴已删除: 木马程序 Backdoor.Win32.Agent.ahj 文件: D:\Downloads\0.rar\0.exe/NSPack
已删除: 病毒 Worm.Win32.Viking.jz 文件: D:\Downloads\1.rar\1.exe

[病毒样本] 2样本

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

Cyberhawk

本帖子中包含更多资源