过红伞

显示全部楼层 · 发表于 2007-5-2 16:47:26

来测测

显示全部楼层 · 发表于 2007-5-2 16:49:03

KIS621杀了

显示全部楼层 · 发表于 2007-5-2 17:15:13

红伞：
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\过红伞.rar'
C:\Documents and Settings\Administrator\桌面\
  过红伞.rar
[0] Archive type: RAR
--> temp.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.azi.7
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '9556d552.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-2 17:22:21

Result: 1 malware found
Trojan-Dropper.Win32.Agent.azi (virus)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\¹ýºìÉ¡.rar\temp.exe

显示全部楼层 · 发表于 2007-5-2 17:27:52

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-2
Start time: 2007-5-2 17:27
Engine(s): KAV engine (AVK 17.4378), BD-Engine (BD 17.2635)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: temp.exe
In archive: C:\Documents and Settings\Administrator\桌面\过红伞.rar
Status: Virus detected
Virus: Trojan-Dropper.Win32.Agent.azi (KAV engine), Trojan.Muldrop.BX (BD-Engine)
Object: 过红伞.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: Trojan-Dropper.Win32.Agent.azi (KAV engine), Trojan.Muldrop.BX (BD-Engine)
Analysis complete: 2007-5-2 17:27
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-2 17:44:28

Starting the file scan:

Begin scan in 'F:\样本\过红伞.rar'
F:\样本\过红伞.rar
  [0] Archive type: RAR
  --> temp.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.azi.7
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-2 18:31:40

的确过红伞了，不过微点给拦截了

显示全部楼层 · 发表于 2007-5-2 18:42:20

显示全部楼层 · 发表于 2007-5-2 20:32:36

Scan performed at: 2007-5-2 20:32:23
Scanning Log
NOD32 version 2233 (20070501) NT
Command line: D:\过红伞.rar
Operating memory - is OK

Date: 2.5.2007 Time: 20:32:32
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\过红伞.rar
D:\过红伞.rar ?RAR ?temp.exe - a variant of Win32/TrojanDownloader.QQHelper trojan
Number of scanned files: 2
Number of threats found: 1
Number of active threats: 1
Time of completion: 20:32:33 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-5-2 20:34:35

过红伞.rar\temp.exe;D:\Documents and Settings\dell\桌面\过红伞.rar;not a virus Adware.Parad.origin;;
过红伞.rar;D:\Documents and Settings\dell\桌面;Archive contains infected objects;;

[病毒样本] 过红伞

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块