公司电脑上的，看看是什么（卡巴已回复！）

zipponan

公司电脑上的，看看是什么？卡巴未报。

原帖由 zipponan 于 2007-4-4 13:11 发表
用微点的朋友试试，我运行了，卡巴主动防御没有提示，也没访问网络，怀疑是被杀过的样本，无危害了。

原帖由 dreamsfar 于 2007-4-4 14:20 发表
微点没报，运行一切正常～
分析日志，此程序只启动此一个进程，未生成其他文件，未修改注册表，未访问网络～

卡巴给我的回复！

Hello,

GameSetup.exe
No malicious code was found in this file.

结论：公司的这台电脑可能被同事用别的专杀杀过，清除不彻底，所以很多软件都报毒。所以说报毒的杀软都是误报！

[ 本帖最后由 zipponan 于 2007-4-6 09:57 编辑 ]

ouran

G:\样本\GameSetup.rar\GAMESETUP.EXE\00092000.EXE        W32/HLLP.Philis.bg(病毒)

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\GameSetup.rar'
C:\Documents and Settings\morgan\My Documents\
  GameSetup.rar
    [0] Archive type: RAR
    --> GameSetup.exe
        [DETECTION] Contains signature of the Windows virus W32/Viking.BD
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

蓝色牛仔裤

GameSetup.exe\data001;C:\Documents and Settings\Administrator\桌面\GameSetup.rar\GameSetup.exe;Win32.HLLW.Gavir.50;;
GameSetup.exe\data002;C:\Documents and Settings\Administrator\桌面\GameSetup.rar\GameSetup.exe;Win32.HLLW.Gavir.26;;
GameSetup.exe\data003;C:\Documents and Settings\Administrator\桌面\GameSetup.rar\GameSetup.exe;Trojan.DownLoader.14855;;
GameSetup.exe\data005;C:\Documents and Settings\Administrator\桌面\GameSetup.rar\GameSetup.exe;Win32.HLLW.Gavir.50;;
GameSetup.exe\data006;C:\Documents and Settings\Administrator\桌面\GameSetup.rar\GameSetup.exe;Win32.HLLW.Gavir.26;;
GameSetup.exe\data007;C:\Documents and Settings\Administrator\桌面\GameSetup.rar\GameSetup.exe;Trojan.DownLoader.14855;;
GameSetup.exe\data008;C:\Documents and Settings\Administrator\桌面\GameSetup.rar\GameSetup.exe;Win32.HLLP.Whboy;;
GameSetup.exe;C:\Documents and Settings\Administrator\桌面\GameSetup.rar;Archive contains infected objects;;
GameSetup.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

小邪邪

熊猫烧香

zipponan

用微点的朋友试试，我运行了，卡巴主动防御没有提示，也没访问网络，怀疑是被杀过的样本，无危害了。

The EQs

Scan performed at: 2007-4-4 13:24:02
Scanning Log
NOD32 version 2167 (20070403) NT
Command line: C:\Documents and Settings\EQ2\桌面\GameSetup.rar
Operating memory - is OK

Date: 4.4.2007  Time: 13:24:07
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\GameSetup.rar
C:\Documents and Settings\EQ2\桌面\GameSetup.rar ?RAR ?GameSetup.exe - Win32/Viking.BY virus - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:24:08 Total scanning time: 1 sec (00:00:01)

theopensea

mmll888

Starting the file scan:

Begin scan in 'C:\Documents and Settings\zxb\桌面\GameSetup.rar'
C:\Documents and Settings\zxb\桌面\GameSetup.rar
  [0] Archive type: RAR
  --> GameSetup.exe
      [DETECTION] Contains signature of the Windows virus W32/Viking.BD
      [INFO]      The file was deleted!

jlennon