过了不少杀软的毒

The EQs

Scan performed at: 2007-4-1 11:28:20
Scanning Log
NOD32 version 2160 (20070331) NT
Command line: C:\Documents and Settings\EQ2\桌面\复件 rising_1175364393.rar
Operating memory - is OK
Date: 1.4.2007  Time: 11:28:30
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\复件 rising_1175364393.rar
C:\Documents and Settings\EQ2\桌面\复件 rising_1175364393.rar ?RAR ?rising.exe - a variant of Win32/Agent.NEO trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 11:28:31 Total scanning time: 1 sec (00:00:01)

马力

驱逐舰还是不报

明明灭灭

下来试试红伞和微点

明明灭灭

红伞报
AntiVir PersonalEdition Premium
Report file date: 2007年4月1日  11:39

Scanning for 715501 virus strains and unwanted programs.

Licensed to:      Barutcu Selin
Serial number:    1100289448-PEPWE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:         shiyong
Computer name:    4831FA5F135F496

Version information:
BUILD.DAT    : 259           13889 Bytes   2006-12-5 17:20:00
AVSCAN.EXE   : 7.0.3.5      208936 Bytes    2007-3-2 05:59:58
AVSCAN.DLL   : 7.0.3.1       35880 Bytes   2006-12-5 09:20:24
LUKE.DLL     : 7.0.3.2      143400 Bytes  2006-10-31 09:07:48
LUKERES.DLL  : 7.0.2.0        9256 Bytes   2006-12-5 09:20:24
ANTIVIR0.VDF : 6.35.0.1    7371264 Bytes   2006-5-31 08:30:08
ANTIVIR1.VDF : 6.37.1.151  4303360 Bytes   2007-2-23 05:59:58
ANTIVIR2.VDF : 6.38.0.111   406528 Bytes   2007-3-23 23:46:02
ANTIVIR3.VDF : 6.38.0.138    62976 Bytes   2007-3-28 23:22:00
AVEWIN32.DLL : 7.3.1.44    2363904 Bytes   2007-3-22 14:39:16
AVPREF.DLL   : 7.0.2.0       23592 Bytes   2006-11-3 03:53:46
AVREP.DLL    : 6.38.0.90   1204264 Bytes   2007-3-22 14:39:16
AVRPBASE.DLL : 7.0.0.0     2162728 Bytes   2006-3-30 01:43:32
AVPACK32.DLL : 7.3.0.6      360488 Bytes   2007-3-22 14:39:16
AVREG.DLL    : 7.0.1.2       30760 Bytes    2007-3-2 05:59:58
NETNT.DLL    : No Information!
RCIMAGE.DLL  : 7.0.1.3     2334760 Bytes   2006-11-8 01:39:54
RCTEXT.DLL   : 7.0.12.0      77864 Bytes   2006-12-5 09:20:24

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\53b81360.avp
Logging..........................: low
Primary action...................: repair
Secondary action.................: quarantine
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 3
Smart extensions.................: on
Skipped archive types............: BSD Mailbox, Netscape/Mozilla Mailbox, Eudora Mailbox, Squid cache, Pegasus Mailbox, MS Outlook Mailbox,
Macro heuristic..................: on
File heuristic...................: high
Skipped files....................: C:\Program Files\Thunder\Program\msgmanage.dll,
Different risk categories........: +GAME,+JOKE,+PCK,+SPR,
Expanded search settings.........: 0x00000032

Start of the scan: 2007年4月1日  11:39

Start scanning boot sectors:
Boot sector 'D:\'
      [NOTE]      No virus was found!

Starting the file scan:

Begin scan in 'D:\TDdownload\rising_1175364393.rar'
D:\TDdownload\rising_1175364393.rar
  [0] Archive type: RAR
  --> rising.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '468229e1.qua'!


End of the scan: 2007年4月1日  11:39
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

金剑

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用



===============================================
   ___________病毒查杀结果__________________


===============================================

2007年4月1日11时46分2秒 开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\rising_1175364393
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹 (8)\rising_1175364393\rising.exe 发现未知可疑文件:Win32.Nop 鱓 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。


-----------------------------------------

2007年4月1日11时46分2秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

solcroft

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-25
Start time: 2007-4-1 11:56
Engine(s): KAV engine (AVK 17.3527), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: rising.exe
        In archive: C:\Documents and Settings\Administrator\桌面\rising_1175364393.rar
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.Small.ele (KAV engine), GenPack:Generic.Malware.Bdldg.A4444D7D (BD-Engine)
Object: rising_1175364393.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Trojan-Downloader.Win32.Small.ele (KAV engine), GenPack:Generic.Malware.Bdldg.A4444D7D (BD-Engine)
Analysis complete: 2007-4-1 11:56
    1 files checked
    1 infected files detected
    0 suspected files detected

jlennon

黑衣~魂

kav

已偵測到： 木馬程式 Trojan-Downloader.Win32.Small.ele    檔案： C:\Documents and Settings\all.HOME-\桌面\rising.rar/rising.exe

[ 本帖最后由 黑衣~魂 于 2007-4-1 12:15 编辑 ]

zzh161

费尔的启发报