搜索
查看: 2197|回复: 15
收起左侧

[病毒样本] 国外蠕虫

[复制链接]
Nblock
发表于 2007-3-28 16:27:25 | 显示全部楼层 |阅读模式
kill mrt.exe

送给红伞

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
bridgewr
发表于 2007-3-28 16:33:08 | 显示全部楼层
微点杀

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
The EQs
发表于 2007-3-28 16:37:29 | 显示全部楼层

nod32杀蠕虫可是有一手的

Scan performed at: 2007-3-28 16:37:11
Scanning Log
NOD32 version 2148 (20070327) NT
Command line: C:\Documents and Settings\EQ2\桌面\WORM_SOBER.AG.rar
Operating memory - is OK

Date: 28.3.2007  Time: 16:37:19
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\WORM_SOBER.AG.rar
C:\Documents and Settings\EQ2\桌面\WORM_SOBER.AG.rar ?RAR ?File-packed_dataInfo.exe - Win32/Sober.Y worm - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:37:19 Total scanning time: 0 sec (00:00:00)
soul20010
发表于 2007-3-28 16:38:24 | 显示全部楼层
FS7.0
Result: 1 malware found
Email-Worm.Win32.Sober.y (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\WORM_SOBER.AG.rar\File-packed_dataInfo.exe
jlennon
头像被屏蔽
发表于 2007-3-28 17:13:12 | 显示全部楼层
-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-28, 15:12

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\WORM_SOBER[1].AG.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-28, 17:11:05
---------------------------------------------------------------------

[Found worm]         <W32/Sober.Z@mm (exact, not disinfectable)>        C:\Documents and Settings\Administrator\桌面\WORM_SOBER[1].AG.rar->File-packed_dataInfo.exe
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\WORM_SOBER[1].AG.rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\WORM_SOBER[1].AG.rar->File-packed_dataInfo.exe

---------------------------------------------------------------------
Scan ended:        2007-3-28, 17:11:15
Duration:        0:00:10

Scan result:

Scanned files:                 1
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------
电影结束了
发表于 2007-3-28 17:14:51 | 显示全部楼层
扫描系统区域...
扫描所选择的目录和文件...
对象: File-packed_dataInfo.exe
        在压缩档案里: F:\virus9\WORM_SOBER.AG.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Sober.y (KAV 引擎), Win32.Sober.Y@mm (BD 引擎)
对象: WORM_SOBER.AG.rar
        路径: F:\virus9
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Sober.y (KAV 引擎), Win32.Sober.Y@mm (BD 引擎)
扫描完成: 2007-3-28 17:14
    已检查 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件
Anycall-D908
发表于 2007-3-28 17:17:26 | 显示全部楼层
原帖由 观弈书童 于 2007-3-28 16:28 发表
金山Worm.Sober.y.55390

     开始对金山有点改观了,感觉比瑞星和KV好点.看来有进步了啊
allenhippo
发表于 2007-3-28 17:17:27 | 显示全部楼层
很老的毒了吧,应该都能杀

norton花了近2分钟

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
龙井茶
发表于 2007-3-28 17:45:17 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\WORM_SOBER[1].AG.rar'
C:\Documents and Settings\Administrator\桌面\WORM_SOBER[1].AG.rar
  [0] Archive type: RAR
  --> File-packed_dataInfo.exe
      [DETECTION] Contains signature of the worm WORM/Sober.Y
      [1] Archive type: ZIP SFX (self extracting)
      [INFO]      A backup was created as '465c39aa.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛|卡饭乐购| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 苏ICP备07004770号 ) GMT+8, 2019-9-20 07:51 , Processed in 0.045608 second(s), 3 queries , MemCache On.

快速回复 返回顶部 返回列表