样本

显示全部楼层 · 发表于 2007-4-5 13:47:35

Scan performed at: 2007-4-5 13:47:38
Scanning Log
NOD32 version 2168 (20070404) NT
Command line: C:\Documents and Settings\EQ2\桌面\ad[1].rar
Operating memory - is OK

Date: 5.4.2007 Time: 13:47:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\ad[1].rar
C:\Documents and Settings\EQ2\桌面\ad[1].rar ?RAR ?ad[1].exe - Win32/TrojanDownloader.Agent.TE trojan - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:47:43 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-4-5 13:50:13

TrendMicro PC-cillin 2007 掛了

显示全部楼层 · 发表于 2007-4-5 13:50:20

飞塔挂了
上报

显示全部楼层 · 发表于 2007-4-5 13:55:15

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\ad[1].rar'
C:\Documents and Settings\morgan\My Documents\
  ad[1].rar
[0] Archive type: RAR
--> ad[1].exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agen.te.2.B
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-5 17:32:12

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-4
Start time: 2007-4-5 17:32
Engine(s): KAV engine (AVK 17.3765), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: ad[1].exe
In archive: C:\Documents and Settings\Administrator\桌面\ad[1].rar
Status: Virus detected
Virus: MemScan:Trojan.Downloader.Small.BNF (BD-Engine)
Object: ad[1].rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: MemScan:Trojan.Downloader.Small.BNF (BD-Engine)
Analysis complete: 2007-4-5 17:32
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-5 18:19:36

显示全部楼层 · 发表于 2007-4-5 19:14:19

已上报了...

[病毒样本] 样本

本帖子中包含更多资源

我这里微点已经提取了特征了

本帖子中包含更多资源