从中毒的机子上提取出来的

显示全部楼层 · 发表于 2010-10-17 17:49:26

卡巴直接拦截

显示全部楼层 · 发表于 2010-10-17 17:52:47

IK清空

显示全部楼层 · 发表于 2010-10-17 17:53:32

KIS

Trojan-Dropper.Win32.Agent.dgkv

1x to kl

显示全部楼层 · 发表于 2010-10-17 17:55:48

ess kill 2
C:\Users\微亿毫\Desktop\桌面\ntcore.dll - Win32/Pinit.AX 蠕虫
C:\Users\微亿毫\Desktop\桌面\ntcore.dll1 - Win32/Pinit.AX 蠕虫
1X to eset
http://samples.nod32.com.sg/inde ... e7d2355ced839909a75

显示全部楼层 · 发表于 2010-10-17 18:32:46

下载part1的时候

显示全部楼层 · 发表于 2010-10-17 18:36:27

avira

Begin scan in 'D:\DOWNLOAD\ntcore.dll'
D:\DOWNLOAD\ntcore.dll
[DETECTION] Is the TR/Spy.Agent.OFQ Trojan
[NOTE]    The file was moved to quarantine directory and named '4ec57374.qua'!
Begin scan in 'D:\DOWNLOAD\ntcore.dll1'
D:\DOWNLOAD\ntcore.dll1
[DETECTION] Is the TR/Spy.Agent.OFQ Trojan
[NOTE]    The file was moved to quarantine directory and named '56525cd3.qua'!
Begin scan in 'D:\DOWNLOAD\ole32.dll'
D:\DOWNLOAD\ole32.dll
[DETECTION] Is the TR/Patched.Gen2 Trojan
[NOTE]    The file was moved to quarantine directory and named '040f0633.qua'!

显示全部楼层 · 发表于 2010-10-17 20:21:31

显示全部楼层 · 发表于 2010-10-17 20:23:02

呵呵过去了

显示全部楼层 · 发表于 2010-10-17 20:23:18

一般来说这样的样本扫描问题都不大，关键就是如何把电脑给复原了……这个多数杀软都很难做到的

[病毒样本] 从中毒的机子上提取出来的

评分

浏览过的版块