一包杂碎

显示全部楼层 · 发表于 2007-4-1 03:03:11

没事干了来扫扫,有个可疑,可能不是毒,高手看看.

[ 本帖最后由一派胡言于 2007-4-1 03:04 编辑 ]

显示全部楼层 · 发表于 2007-4-1 03:05:59

漏掉一个

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\一包杂碎（9个）.rar'
C:\Documents and Settings\morgan\My Documents\
  一包杂碎（9个）.rar
[0] Archive type: RAR
--> cm[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.20480.26
      [WARNING] Infected files in archives cannot be repaired!
--> qq[2].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> 20303[1].exe
--> do[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> w[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.10240.21
      [WARNING] Infected files in archives cannot be repaired!
--> cx[2].exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [WARNING] Infected files in archives cannot be repaired!
--> r[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> m[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> q[1].exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年3月31日  12:06
Used time: 00:09 min

The scan has been done completely.

   0 Scanning directories
   10 Files were scanned
   8 viruses and/or unwanted programs were found
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   9 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-4-1 03:10:24

漏掉的看来都差不多，不过可以肯定是病毒，运行后antivir报了2个，一个貌似是雅虎助手，一个是3721
File: 20303[1].exe
Status: OK
MD5 662adf19471ff57e3289257d24014db5
Packers detected: -

Scanner results
Scan taken on 31 Mar 2007 19:06:26 (GMT)
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

显示全部楼层 · 发表于 2007-4-1 07:05:12

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年4月1日7时5分6秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\一包杂碎（9个）
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\一包杂碎（9个）\do[1].exe 发现未知可疑文件:Win32.Nop id3u6 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\一包杂碎（9个）\w[1].exe 发现未知可疑文件:Win32.NkHack.FSG.A 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\一包杂碎（9个）\cx[2].exe 发现未知可疑文件:Win32.NkHack.FSG.A 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\一包杂碎（9个）\q[1].exe 发现未知可疑文件:Win32.NkHack.FSG.A 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\一包杂碎（9个）\do[1].exe 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\一包杂碎（9个）\m[1].exe 带壳文件:UPX加壳
-----------------------------------------

2007年4月1日7时5分6秒收起线程…100% 查杀完毕！
扫描文件：9查杀病毒：4

显示全部楼层 · 发表于 2007-4-1 07:23:02

查杀病毒两个：Adware.Malware.ox和Adware.Malware.fll，江民报的病毒。

显示全部楼层 · 发表于 2007-4-1 08:11:35

卡巴6个不报..

显示全部楼层 · 发表于 2007-4-1 08:23:33

费尔杀了3个启发了一个....

显示全部楼层 · 发表于 2007-4-1 08:45:38

NOD 32右键扫描报3个，启发一个：
Scan performed at: 2007-4-1 8:44:39
Scanning Log
NOD32 version 2158 (20070330) NT
Command line: E:\病毒\一包杂碎（9个）.rar

Date: 1.4.2007 Time: 08:44:41
Anti-Stealth technology is enabled.
Scanned disks, folders and files: E:\病毒\一包杂碎（9个）.rar
E:\病毒\一包杂碎（9个）.rar ?RAR ?qq[2].exe - probably unknown NewHeur_PE virus [7]
E:\病毒\一包杂碎（9个）.rar ?RAR ?w[1].exe - a variant of Win32/PSW.Agent.NCC trojan
E:\病毒\一包杂碎（9个）.rar ?RAR ?r[1].exe - a variant of Win32/PSW.Agent.NDF trojan
E:\病毒\一包杂碎（9个）.rar ?RAR ?m[1].exe - a variant of Win32/PSW.Agent.NDP trojan
Number of scanned files: 9
Number of threats found: 4
Time of completion: 08:44:42 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-4-1 09:05:21

FS7.0和卡巴结果一样
Result: 3 malware found
Trojan-PSW.Win32.OnLineGames.es (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Ò»°üÔÓËé£¨9¸ö£©.rar\w[1].exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Ò»°üÔÓËé£¨9¸ö£©.rar\r[1].exe
Trojan-PSW.Win32.OnLineGames.kw (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Ò»°üÔÓËé£¨9¸ö£©.rar\m[1].exe

显示全部楼层 · 发表于 2007-4-1 11:36:10

驱逐舰报四个

[病毒样本] 一包杂碎

本帖子中包含更多资源

本帖子中包含更多资源