两样本~~

显示全部楼层 · 发表于 2007-3-30 16:24:57

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年3月30日16时24分59秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\pe
C:\Documents and Settings\Administrator\桌面\新建文件夹\pe\pe.exe 发现未知可疑文件:Win32.Upx N See 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\pe\AC9F847E.EXE 发现未知可疑文件:Win32.Upx N See 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2007年3月30日16时24分59秒收起线程…100% 查杀完毕！
扫描文件：2查杀病毒：2

显示全部楼层 · 发表于 2007-3-30 16:36:22

FBAV2.0的范围庄能力还是很……

显示全部楼层 · 发表于 2007-3-30 16:37:37

Scan performed at: 2007-3-30 16:37:52
Scanning Log
NOD32 version 2157 (20070330) NT
Command line: C:\Documents and Settings\EQ2\桌面\AC9F847E.rar C:\Documents and Settings\EQ2\桌面\pe.rar
Operating memory - is OK

Date: 30.3.2007 Time: 16:37:56
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\AC9F847E.rar; C:\Documents and Settings\EQ2\桌面\pe.rar
C:\Documents and Settings\EQ2\桌面\AC9F847E.rar ?RAR ?AC9F847E.EXE - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\pe.rar ?RAR ?pe.exe - a variant of Win32/Agent.NEO trojan
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 16:37:58 Total scanning time: 2 sec (00:00:02)

显示全部楼层 · 发表于 2007-3-30 16:39:01

NIS两个都挂，费尔报两个启发

显示全部楼层 · 发表于 2007-3-30 19:20:00

卡巴不报警...

显示全部楼层 · 发表于 2007-3-30 23:07:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\AC9F847E.rar'
C:\Documents and Settings\morgan\My Documents\
  AC9F847E.rar
[0] Archive type: RAR
--> AC9F847E.EXE
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\pe.rar'
C:\Documents and Settings\morgan\My Documents\
  pe.rar
[0] Archive type: RAR
--> pe.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] 两样本~~

本帖子中包含更多资源