搜索
查看: 1985|回复: 12
收起左侧

[病毒样本] 2样本

[复制链接]
tonger2003
发表于 2007-3-28 14:23:05 | 显示全部楼层 |阅读模式
2

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
The EQs
发表于 2007-3-28 14:29:53 | 显示全部楼层
Scan performed at: 2007-3-28 14:30:00
Scanning Log
NOD32 version 2148 (20070327) NT
Command line: C:\Documents and Settings\EQ2\桌面\1.rar C:\Documents and Settings\EQ2\桌面\0.rar
Operating memory - is OK

Date: 28.3.2007  Time: 14:30:08
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\1.rar; C:\Documents and Settings\EQ2\桌面\0.rar
C:\Documents and Settings\EQ2\桌面\0.rar ?RAR ?0.exe - a variant of Win32/Agent.NEO trojan
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:30:09 Total scanning time: 1 sec (00:00:01)
uhthn2002
发表于 2007-3-28 14:34:02 | 显示全部楼层
vba32

C:\Documents and Settings\tomcheung\Desktop\0.rar : ok
C:\Documents and Settings\tomcheung\Desktop\1.rar:<RAR>\1.exe : infected MalwareScope.Worm.Viking.3
mofunzone
发表于 2007-3-28 14:40:03 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\1.rar'
C:\Documents and Settings\morgan\My Documents\
  1.rar
    [0] Archive type: RAR
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\0.rar'
C:\Documents and Settings\morgan\My Documents\
  0.rar
    [0] Archive type: RAR
    --> 0.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
观弈书童
发表于 2007-3-28 14:45:33 | 显示全部楼层
C:\Documents and Settings\Administrator\桌面\病毒样本\样本文件\0.rar ?RAR ?0.exe - a variant of Win32/Agent.NEO 木马
jlennon
头像被屏蔽
发表于 2007-3-28 16:09:35 | 显示全部楼层
-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-28, 15:12

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\1.rar|C:\Documents and Settings\Administrator\桌面\0.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-28, 16:09:16
---------------------------------------------------------------------

[Found possible virus]         <W32/PWStealer.gen1 (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\1.rar->1.exe
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\1.rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\1.rar->1.exe

---------------------------------------------------------------------
Scan ended:        2007-3-28, 16:09:21
Duration:        0:00:05

Scan result:

Scanned files:                 2
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------
Nblock
发表于 2007-3-28 16:38:18 | 显示全部楼层
/

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
jlennon
头像被屏蔽
发表于 2007-3-28 18:48:39 | 显示全部楼层
12

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
solcroft
发表于 2007-3-28 18:57:44 | 显示全部楼层

Cyberhawk

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
caocao
发表于 2007-3-28 19:15:20 | 显示全部楼层
卡巴已删除: 木马程序 Backdoor.Win32.Agent.ahj        文件: D:\Downloads\0.rar\0.exe/NSPack
已删除: 病毒 Worm.Win32.Viking.jz        文件: D:\Downloads\1.rar\1.exe
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛|卡饭乐购| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 苏ICP备07004770号 ) GMT+8, 2019-10-20 06:35 , Processed in 0.092489 second(s), 19 queries .

快速回复 返回顶部 返回列表