一小包

显示全部楼层 · 发表于 2007-3-30 16:42:34

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-30, 6:08

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\wgs3.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-30, 16:42:25
---------------------------------------------------------------------

[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\wgs3.rar->SVCH0ST.EXE
[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\wgs3.rar->wgs3.exe
[Found possible virus] <W32/PWStealer.gen1 (not disinfectable)> C:\Documents and Settings\Administrator\桌面\wgs3.rar->wms3.exe
[Found possible virus] <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\wgs3.rar->msccrt.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\wgs3.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\wgs3.rar->msccrt.exe

---------------------------------------------------------------------
Scan ended: 2007-3-30, 16:42:29
Duration: 0:00:04

Scan result:

Scanned files:    1
Infected objects:    4
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-3-30 16:48:12

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年3月30日16时47分56秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\wgs3
C:\Documents and Settings\Administrator\桌面\新建文件夹\wgs3\SVCH0ST.EXE 发现未知可疑文件:Win32.Upx N See 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\wgs3\wgs3.exe 发现未知可疑文件:Win32.Upx N See 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\wgs3\wms3.exe 发现未知可疑文件:Win32.Upx N See 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\新建文件夹\wgs3\SVCH0ST.EXE 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\wgs3\wgs3.exe 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\wgs3\wms3.exe 带壳文件:UPX加壳
-----------------------------------------

2007年3月30日16时47分56秒收起线程…100% 查杀完毕！
扫描文件：4查杀病毒：3

显示全部楼层 · 发表于 2007-3-30 16:49:29

LS还没回答偶到底能识别多少壳呢？？？

显示全部楼层 · 发表于 2007-3-30 19:53:10

卡巴报警...

[病毒样本] 一小包