毒网

显示全部楼层 · 发表于 2007-4-13 15:01:58

http://www.av25.com/index/MovieView.asp?MovieViewID=656

显示全部楼层 · 发表于 2007-4-13 15:06:05

挂的是威金

显示全部楼层 · 发表于 2007-4-13 15:07:37

已检测到: 病毒 Worm.Win32.Viking.kl URL: http://my.kafan.cn/attachment.php?aid=54577//0.exe

显示全部楼层 · 发表于 2007-4-13 15:08:31

2007-4-13,15:08:06 [WARNING] Contains signature of the HTML script virus HTML/Dldr.Psyme.FM!
  C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CFMZWZ87\0[1].htm
   [INFO] The file will be moved to quarantine.
2007-4-13,15:08:14 [WARNING] Contains signature of the exploits EXP/Ani.Gen!
  C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\muxiao2[1].jpg
   [INFO] The file will be moved to quarantine.
2007-4-13,15:08:15 [WARNING] Contains signature of the HTML script virus HTML/Dldr.Psyme.FM!
  C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\8H0J8303\0[1].htm
   [INFO] The file will be moved to quarantine.
2007-4-13,15:08:18 [WARNING] Contains signature of the exploits EXP/Ani.Gen!
  C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CFMZWZ87\muxiao2[1].jpg
   [INFO] The file will be moved to quarantine.

显示全部楼层 · 发表于 2007-4-13 15:12:02

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\0.rar'
C:\Documents and Settings\morgan\My Documents\
  0.rar
[0] Archive type: RAR
--> 0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-13 15:14:56

M版，为什么红伞对威金都是那样报法TR/Crypt.NSPM.Gen，好像从没见过红伞报出Viking这样的病毒名？

显示全部楼层 · 发表于 2007-4-13 15:30:11

基因识别的缘故，红伞的理念是减少普通特征码，增强基因识别，一般都很少会见到如别的杀软一般报病毒名字

显示全部楼层 · 发表于 2007-4-13 16:37:00

因为就算报Viking红伞也不会清除病毒，还不如不加入库，直接报壳，反正结果都是删掉文件，可怜那~``

显示全部楼层 · 发表于 2007-4-13 16:38:03

现在不就是在报壳？？？？

显示全部楼层 · 发表于 2007-4-13 16:38:31

Scan performed at: 2007-4-13 16:38:10
Scanning Log
NOD32 version 2185 (20070412) NT
Command line: C:\Documents and Settings\EQ2\桌面\0.rar
Operating memory - is OK

Date: 13.4.2007 Time: 16:38:15
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\0.rar
C:\Documents and Settings\EQ2\桌面\0.rar ?RAR ?0.exe - Win32/Viking.CH virus - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:38:15 Total scanning time: 0 sec (00:00:00)

[病毒样本] 毒网

本帖子中包含更多资源

本帖子中包含更多资源

四毒！

回复 #6 欠你幸福的帖子

回复 #8 buycard 的帖子

[病毒样本] 毒网

本帖子中包含更多资源

本帖子中包含更多资源

四毒！

回复 #6 欠你幸福 的帖子

回复 #8 buycard 的帖子

回复 #6 欠你幸福的帖子