一堆

显示全部楼层 · 发表于 2007-4-2 10:00:10

一堆

[ 本帖最后由流清泉于 2007-4-2 10:03 编辑 ]

显示全部楼层 · 发表于 2007-4-2 10:08:54

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\2.zip'
C:\Documents and Settings\morgan\My Documents\
  2.zip
[0] Archive type: ZIP
--> oyxvy.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> packet.dll
--> SC0NFIG.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> SPy.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> TIMPLATF0RM.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.DQ.2
      [WARNING] Infected files in archives cannot be repaired!
--> upxdnd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> wanpacket.dll
--> wgs0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> wgs3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> wsttrs.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> wsttrs.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> xrc.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> yqr.exe
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\1.zip'
C:\Documents and Settings\morgan\My Documents\
  1.zip
[0] Archive type: ZIP
--> 7.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> cmdbcs.dll
--> cmdbcs.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> IECOFIG.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> isignup.dll
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> isignup.sys
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> ldasd.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> MCONFIG.EXE
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> mhso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> npptools.dll
      [WARNING] The file was ignored!

End of the scan: 2007年4月1日  19:08
Used time: 00:13 min

The scan has been done completely.

   0 Scanning directories
   25 Files were scanned
   18 viruses and/or unwanted programs were found
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   2 Archives were scanned
   20 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-4-2 10:15:49

用了诺顿+费尔，不好测试了，费尔一扫描，诺顿就能杀掉里面的病毒~~

显示全部楼层 · 发表于 2007-4-2 10:21:14

antivir没报的有两个已经确定不是病毒了
File ID    Filename    Size (Byte) Result
245702    cmdbcs.dll    10.240    UNDER ANALYSIS
206398    packet.dll    81.920    CLEAN
206396    wanpacket.dll    61.440    CLEAN

显示全部楼层 · 发表于 2007-4-2 10:26:30

卡巴应该是全挂，bd报了12个

显示全部楼层 · 发表于 2007-4-2 10:28:09

不是吧。。。卡巴全挂。。。nod32才报11个。。。。

显示全部楼层 · 发表于 2007-4-2 11:53:30

KAV7.0 报三个(全是HEUR)

显示全部楼层 · 发表于 2007-4-2 11:55:31

KIS7呢？

显示全部楼层 · 发表于 2007-4-2 16:14:27

卡巴不报警...

显示全部楼层 · 发表于 2007-4-2 17:35:39

费尔报了5个马，3个壳，启发3个，启发未知壳2个.......

[病毒样本] 一堆

本帖子中包含更多资源

回复 #5 pamier2001 的帖子

回复 #6 EQ2 的帖子