Kaspersky Anti-Virus found nothing

显示全部楼层 · 发表于 2007-4-3 01:13:57

Rootkit构件档案三个

显示全部楼层 · 发表于 2007-4-3 01:29:10

Scan performed at: 2007-4-3 1:29:26
Scanning Log
NOD32 version 2163 (20070402) NT
Command line: C:\Documents and Settings\EQ2\桌面\b.zip
Operating memory - is OK

Date: 3.4.2007 Time: 01:29:31
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\b.zip
C:\Documents and Settings\EQ2\桌面\b.zip ?ZIP ?b.sys - Win32/Rootkit.Agent.NBB trojan - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 01:29:31 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-4-3 01:42:57

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-1
Start time: 2007-4-3 1:42
Engine(s): KAV engine (AVK 17.3690), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: b.sys
In archive: C:\Documents and Settings\Administrator\桌面\b.zip
Status: Virus detected
Virus: Adware.01.Soubor (BD-Engine)
Object: staB.dll
In archive: C:\Documents and Settings\Administrator\桌面\b.zip
Status: Suspected virus
Virus: Generic.Malware.Sdld.98F831DD (BD-Engine)
Object: b.zip
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Adware.01.Soubor, Generic.Malware.Sdld.98F831DD (BD-Engine)
Analysis complete: 2007-4-3 1:42
1 files checked
1 infected files detected
0 suspected files detected
=====================================
紧急时刻还得靠BD

显示全部楼层 · 发表于 2007-4-3 02:21:02

Begin scan in 'C:\download\bingdu\b.zip'
C:\download\bingdu\b.zip
  [0] Archive type: ZIP
  --> b.sys
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.AJ
  --> staB.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Small.FW
  --> winB.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/SoduiSearch
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-4-3 09:02:09

哇~~蜘蛛今天表现太好了, 到目前为止一个都没有放过!!

b.zip\b.sys;C:\Documents and Settings\Administrator\桌面\b.zip;Adware.Newweb;;
b.zip\staB.dll;C:\Documents and Settings\Administrator\桌面\b.zip;Adware.Newweb;;
b.zip\winB.dll;C:\Documents and Settings\Administrator\桌面\b.zip;Adware.Newweb;;
b.zip;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-4-3 09:08:45

卡巴不行了，我的诺顿10.0企业版，报了

显示全部楼层 · 发表于 2007-4-3 11:50:27

显示全部楼层 · 发表于 2007-4-3 11:52:31

红伞不错,全干了

Starting the file scan:

Begin scan in 'C:\Documents and Settings\FEAR\My Documents\b.zip'
C:\Documents and Settings\FEAR\My Documents\b.zip
  [0] Archive type: ZIP
  --> b.sys
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.AJ
  --> staB.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Small.FW
  --> winB.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/SoduiSearch
   [INFO]    The file was moved to '468bcf95.qua'!

显示全部楼层 · 发表于 2007-4-3 16:16:57

Starting the file scan:

Begin scan in 'C:\Documents and Settings\zxb\桌面\b.zip'
C:\Documents and Settings\zxb\桌面\b.zip
  [0] Archive type: ZIP
  --> staB.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Small.FW
   [INFO]    The file was deleted!

[病毒样本] Kaspersky Anti-Virus found nothing

本帖子中包含更多资源

2个报已知另外一个还是dll 文件

本帖子中包含更多资源

[病毒样本] Kaspersky Anti-Virus found nothing

本帖子中包含更多资源

2个报已知 另外一个还是dll 文件

本帖子中包含更多资源

2个报已知另外一个还是dll 文件