nod32报未知

The EQs

Scan performed at: 2007-4-2 0:59:57
Scanning Log
NOD32 version 2160 (20070331) NT
Command line: C:\Documents and Settings\EQ2\桌面\SET.rar
Operating memory - is OK
Date: 2.4.2007  Time: 01:00:01
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\SET.rar
C:\Documents and Settings\EQ2\桌面\SET.rar ?RAR ?SETUP.EXE - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 01:00:01 Total scanning time: 0 sec (00:00:00)
Notes:
[7] File is probably infected with an unknown virus.

no.01

norton,没查出什么

no.01

另一台kav也没查出什么

小邪邪

已检测

jlennon

扫描报告
2007年4月2日 1:35:13 - 1:35:14
计算机名称: 0553A719C5644CE
扫描类型: 扫描目标
目标: C:\Documents and Settings\Administrator\桌面\SET.rar


--------------------------------------------------------------------------------

结果: 发现 1 恶意软件
Trojan-Downloader.Win32.Agent.bkp (病毒)
C:\Documents and Settings\Administrator\桌面\SET.rar\SETUP.EXE




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 2
尚未扫描: 0
结果:
病毒: 1
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
已删除邮件: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
已感染: 0
可疑项目: 0
已杀毒: 0


--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2007-04-01_03
间谍软件: 2007-04-01_03
扫描引擎:
F-Secure AVP: 7.00.171, 2007-04-01
F-Secure Libra: 2.04.01, 2007-03-30
F-Secure Orion: 1.02.37, 2007-04-01
F-Secure Draco: 1.00.35, 2007-03-26
扫描选项:
扫描定义的文件: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

--------------------------------------------------------------------------------

版权 © 1998-2007 产品支持 | 发送病毒样本到 F-Secure

solcroft

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\SET.rar'
C:\Documents and Settings\morgan\My Documents\
  SET.rar
    [0] Archive type: RAR
    --> SETUP.EXE
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

jlennon

原帖由 solcroft 于 2007-4-2 01:36 发表

这么快就用上啦，英文看起来比中文的好看些。

solcroft

原帖由 jlennon 于 2007-4-2 03:28 发表
这么快就用上啦，英文看起来比中文的好看些。

费尔的提示有点怪，只要碰上木马统统都会警告：“这个程序会盗取您的个人资料。”

jlennon