2个

显示全部楼层 · 发表于 2007-4-3 16:16:18

者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年4月3日16时16分16秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\mm
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\mm\mm.exe
C:\Documents and Settings\Administrator\桌面\新建文件夹\mm\mm.exe 发现未知可疑文件:Win32.NkHack.Preloc.A 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\新建文件夹\mm\mm.exe 带壳文件:UPX加壳
-----------------------------------------

2007年4月3日16时16分17秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：2

显示全部楼层 · 发表于 2007-4-3 16:25:47

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-1
Start time: 2007-4-3 16:25
Engine(s): KAV engine (AVK 17.3690), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 1.jpg
In archive: C:\Documents and Settings\Administrator\桌面\1.rar
Status: Virus detected
Virus: Exploit.Win32.IMG-ANI.k (KAV engine), Exploit.Win32.MS05-002.Gen (BD-Engine)
Object: 1.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Exploit.Win32.IMG-ANI.k (KAV engine), Exploit.Win32.MS05-002.Gen (BD-Engine)
Object: mm.exe
In archive: C:\Documents and Settings\Administrator\桌面\mm.rar
Status: Virus detected
Virus: Generic.PWStealer.F619A6F1 (BD-Engine)
Object: mm.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Generic.PWStealer.F619A6F1 (BD-Engine)
Analysis complete: 2007-4-3 16:25
2 files checked
2 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-3 17:11:45

Scan performed at: 2007-4-3 17:11:55
Scanning Log
NOD32 version 2166 (20070403) NT
Command line: C:\Documents and Settings\EQ2\桌面\1.rar C:\Documents and Settings\EQ2\桌面\mm.rar
Operating memory - is OK

Date: 3.4.2007 Time: 17:12:00
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\1.rar; C:\Documents and Settings\EQ2\桌面\mm.rar
C:\Documents and Settings\EQ2\桌面\1.rar ?RAR ?1.jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
Number of scanned files: 4
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 17:12:00 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-4-3 17:18:35

FS7.0
Result: 1 malware found
Exploit.Win32.IMG-ANI.k (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\1.rar\1.jpg

显示全部楼层 · 发表于 2007-4-3 17:42:14

mm.rar\mm.exe;C:\Documents and Settings\Administrator\桌面\mm.rar;Trojan.PWS.Gamania.origin;;
mm.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
1.rar\1.jpg;C:\Documents and Settings\Administrator\桌面\1.rar;Trojan.DownLoader.19858;;
1.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-4-3 18:13:16

KIS
已删除: 恶意程序 Exploit.Win32.IMG-ANI.k 文件: D:\Downloads\1.rar.td\1.jpg

显示全部楼层 · 发表于 2007-4-3 18:15:06

Starting the file scan:

Begin scan in 'C:\Documents and Settings\zxb\桌面\mm.rar'
C:\Documents and Settings\zxb\桌面\mm.rar
  [0] Archive type: RAR
  --> mm.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

Starting the file scan:

Begin scan in 'C:\Documents and Settings\zxb\桌面\1.rar'
C:\Documents and Settings\zxb\桌面\1.rar
  [0] Archive type: RAR
  --> 1.jpg
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-3 18:15:30

红伞今天表现不错，又全杀了

Starting the file scan:

Begin scan in 'C:\Documents and Settings\FEAR\My Documents\mm.rar'
C:\Documents and Settings\FEAR\My Documents\mm.rar
  [0] Archive type: RAR
  --> mm.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was moved to '4640298e.qua'!
Begin scan in 'C:\Documents and Settings\FEAR\My Documents\1.rar'
C:\Documents and Settings\FEAR\My Documents\1.rar
  [0] Archive type: RAR
  --> 1.jpg
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
   [INFO]    The file was moved to '4684294f.qua'!

显示全部楼层 · 发表于 2007-4-3 18:16:11

瑞星没反映

[病毒样本] 2个

本帖子中包含更多资源