一个未知样本

小邪邪

是从这个贴子里捕获的
http://bbs.kafan.cn/viewthread.php?tid=68051&pid=766520&page=1&extra=page%3D1#pid766520

绅博周幸

诺顿2007扫不到

soul20010

FS7.0没有反应。。。

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\007[1].rar'
C:\Documents and Settings\morgan\My Documents\
  007[1].rar
    [0] Archive type: RAR
    --> 007[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

jlennon

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-30, 6:08

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\007[1].rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-31, 11:36:33
---------------------------------------------------------------------

[Found possible virus]         <W32/PWStealer.gen1 (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\007[1].rar->007[1].exe
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\007[1].rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\007[1].rar->007[1].exe

---------------------------------------------------------------------
Scan ended:        2007-3-31, 11:36:58
Duration:        0:00:25

Scan result:

Scanned files:                 1
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

znzm52

卡巴也扫不到

Nblock

。。

gggh

卡巴也扫不到

Anycall-D908

扫描进行于：2007-3-31 11:52
扫描日志
NOD32版本 2158 (20070330) NT
命令行： C:\Documents and Settings\OUYANG\桌面\007[1].rar

日期： 31.3.2007  时间：11:52:15
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\OUYANG\桌面\007[1].rar
已扫描的文件数目：1
已发现的病毒数目：0
完成时间： 11:52:15 总扫描时间：0 秒 (00:00:00)

死翘翘的NOD32

jlennon

1