再來個新的樣本

显示全部楼层 · 发表于 2007-5-6 01:59:21

Scan performed at: 2007-5-6 1:59:42
Scanning Log
NOD32 version 2243 (20070505) NT
Command line: C:\Documents and Settings\EQ2\桌面\IE.rar
Operating memory - is OK

Date: 6.5.2007 Time: 01:59:46
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\IE.rar
C:\Documents and Settings\EQ2\桌面\IE.rar ?RAR ?IE.exe - a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 01:59:47 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-5-6 01:59:40

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.nv 文件: C:\Documents and Settings\Administrator\桌面\IE.rar/IE.exe

显示全部楼层 · 发表于 2007-5-6 02:00:51

显示全部楼层 · 发表于 2007-5-6 02:21:10

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\IE.rar'
C:\Documents and Settings\morgan\My Documents\
  IE.rar
[0] Archive type: RAR
--> IE.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-6 08:13:05

NOD32 D:\下载文件夹\IE.rar >>RAR >>IE.exe - Win32/PSW.Agent.NCC 木马的变种

显示全部楼层 · 发表于 2007-5-6 08:52:11

驱逐舰不杀

显示全部楼层 · 发表于 2007-5-6 13:31:36

McAfee 已自動封鎖並移除特洛伊病毒。

詳細資料
偵測: PWS-LegMir (特洛伊病毒), PWS-LegMir (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME-.\桌面\IE.exe

显示全部楼层 · 发表于 2007-5-6 13:42:18

微点

显示全部楼层 · 发表于 2007-5-6 13:44:55

---------------------------------------------------------
AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间: 13:44:50 2007-5-6

+ 扫描结果:

F:\样本\IE.rar/IE.exe -> Trojan.Wow : 已清除.

::报告结束

[病毒样本] 再來個新的樣本

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

WOW病毒???