viking一个

显示全部楼层 · 发表于 2007-4-5 17:15:24

Scan performed at: 2007-4-5 17:15:30
Scanning Log
NOD32 version 2168 (20070404) NT
Command line: C:\Documents and Settings\EQ2\桌面\www_1175755249\ipclient.exe
Operating memory - is OK
Date: 5.4.2007 Time: 17:15:33
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\www_1175755249\ipclient.exe
C:\Documents and Settings\EQ2\桌面\www_1175755249\ipclient.exe - Win32/Pacex.Gen virus
Number of scanned files: 1
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 17:15:34 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-4-5 17:16:38

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-4
Start time: 2007-4-5 17:16
Engine(s): KAV engine (AVK 17.3765), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: ipclient.exe
In archive: C:\Documents and Settings\Administrator\桌面\ipclient.rar
Status: Virus detected
Virus: GenPack:Win32.Worm.Viking.IZ (BD-Engine)
Object: ipclient.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: GenPack:Win32.Worm.Viking.IZ (BD-Engine)
Analysis complete: 2007-4-5 17:16
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-5 17:28:03

繼續上報

显示全部楼层 · 发表于 2007-4-5 17:31:48

我用毒霸查出来杀了

显示全部楼层 · 发表于 2007-4-5 17:33:27

微点发现了卡巴哑巴了

显示全部楼层 · 发表于 2007-4-5 17:34:04

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年4月5日17时34分2秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\ipclient
C:\Documents and Settings\Administrator\桌面\新建文件夹\ipclient\ipclient.exe 发现未知可疑文件:Win32.Nop hes2cs 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2007年4月5日17时34分2秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

显示全部楼层 · 发表于 2007-4-5 17:45:37

金山Win32.NsAnti.ca.43611

显示全部楼层 · 发表于 2007-4-5 18:09:46

HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ LOAD C:\WINDOWS\UNINSTALL\RUNDL132.EXE E:\SOFT_KILLER\IPCLIENT\IPCLIENT.EXE

显示全部楼层 · 发表于 2007-4-5 19:11:23

已上报了...

显示全部楼层 · 发表于 2007-4-5 23:21:43

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\ipclient.rar'
C:\Documents and Settings\morgan\My Documents\
  ipclient.rar
[0] Archive type: RAR
--> ipclient.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] viking一个

本帖子中包含更多资源

本帖子中包含更多资源