一堆东西

显示全部楼层 · 发表于 2007-3-31 21:51:52

可能有不是的

[ 本帖最后由流清泉于 2007-3-31 21:55 编辑 ]

显示全部楼层 · 发表于 2007-3-31 21:54:28

灌水的吗～～～～？

显示全部楼层 · 发表于 2007-3-31 22:08:06

卡巴不报..

显示全部楼层 · 发表于 2007-3-31 22:36:19

驱逐舰都不报

显示全部楼层 · 发表于 2007-4-1 01:29:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\新建文件夹.zip'
C:\Documents and Settings\morgan\My Documents\
  新建文件夹.zip
[0] Archive type: ZIP
--> ÐÂ½¨ÎÄ¼þ¼Ð/crasos.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/gtapi.dll
--> ÐÂ½¨ÎÄ¼þ¼Ð/LgSy0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/LgSy1.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/LgSy2.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/Msxo0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/Msxo1.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/Rav20.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/Rav21.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/Rav30.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/Rav31.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/rundl132.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/Servere.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ÐÂ½¨ÎÄ¼þ¼Ð/winlog0n.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-1 07:07:44

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年4月1日7时7分36秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\crasos.exe 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\rundl132.exe 为可疑文件
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Servere.exe 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\winlog0n.exe 为可疑文件
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\LgSy0.dll 发现未知可疑文件:Win32.Nop n5d6 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\LgSy1.dll 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\LgSy2.dll 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Msxo0.dll 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Msxo1.dll 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav20.dll 发现未知可疑文件:Win32.Nop n5d6 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav21.dll 发现未知可疑文件:Win32.Nop n5d6 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav30.dll 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav31.dll 发现未知可疑文件:Win32.Nop nwku 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\crasos.exe 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Servere.exe 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\LgSy0.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\LgSy1.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\LgSy2.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Msxo0.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Msxo1.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav20.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav21.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav30.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\新建文件夹\新建文件夹\Rav31.dll 带壳文件:UPX加壳
-----------------------------------------

2007年4月1日7时7分40秒收起线程…100% 查杀完毕！
扫描文件：14查杀病毒：12

显示全部楼层 · 发表于 2007-4-1 07:18:34

江民报出两个病毒，打开网页监控自动提示。

显示全部楼层 · 发表于 2007-4-1 08:28:27

费尔好厉害，居然启发了17个.....

[病毒样本] 一堆东西

本帖子中包含更多资源