查看: 1774|回复: 9
收起左侧

[病毒样本] 最后两个

[复制链接]
红心王子
发表于 2007-5-6 07:06:48 | 显示全部楼层 |阅读模式
0000000000

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
The EQs
发表于 2007-5-6 07:10:42 | 显示全部楼层
Scan performed at: 2007-5-6 7:10:50
Scanning Log
NOD32 version 2244 (20070505) NT
Command line: C:\Documents and Settings\EQ2\桌面\蠕虫一个.rar C:\Documents and Settings\EQ2\桌面\强行打开摄像头的软件.rar
Operating memory - is OK

Date: 6.5.2007  Time: 07:10:54
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\蠕虫一个.rar; C:\Documents and Settings\EQ2\桌面\强行打开摄像头的软件.rar
C:\Documents and Settings\EQ2\桌面\蠕虫一个.rar ?RAR ?aRrvF.exe - Win32/Agent.NAU worm - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\蠕虫一个.rar ?RAR ?etOPe.rar ?RAR ?etOPe.exe - Win32/Agent.NAU worm - was a part of the deleted object
Number of scanned files: 12
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 07:10:54 Total scanning time: 0 sec (00:00:00)
jlennon
头像被屏蔽
发表于 2007-5-6 07:29:24 | 显示全部楼层
Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-6 7:29
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: aRrvF.exe
        Path: C:\Documents and Settings\Administrator\桌面\蠕虫一个
        Status: Move file into quarantine
        Virus: Worm.Win32.Agent.t (KAV engine), Trojan.Downloader.Delf.NRC (BD-Engine)
Object: C52B258C.exe
        Path: C:\Documents and Settings\Administrator\桌面\蠕虫一个
        Status: Move file into quarantine
        Virus: Worm.Win32.Delf.cc (KAV engine), Worm.Delf.CC (BD-Engine)
Object: etOPe.exe
        Path: C:\Documents and Settings\Administrator\桌面\蠕虫一个
        Status: Move file into quarantine
        Virus: Worm.Win32.Agent.t (KAV engine), Trojan.Downloader.Delf.NRC (BD-Engine)
Object: etOPe.exe
        In archive: C:\Documents and Settings\Administrator\桌面\蠕虫一个\etOPe.rar
        Status: Virus detected
        Virus: Worm.Win32.Agent.t (KAV engine), Trojan.Downloader.Delf.NRC (BD-Engine)
Object: etOPe.rar
        Path: C:\Documents and Settings\Administrator\桌面\蠕虫一个
        Status: Move file into quarantine
        Virus: Worm.Win32.Agent.t (KAV engine), Trojan.Downloader.Delf.NRC (BD-Engine)
Analysis complete: 2007-5-6 7:29
    6 files checked
    4 infected files detected
    0 suspected files detected
tracydk
发表于 2007-5-6 07:29:27 | 显示全部楼层
Starting the file scan:

Begin scan in 'F:\样本\强行打开摄像头的软件.rar'
Begin scan in 'F:\样本\蠕虫一个.rar'
F:\样本\蠕虫一个.rar
  [0] Archive type: RAR
  --> C52B258C.exe
      [DETECTION] Contains signature of the worm WORM/Delf.CC
  --> aRrvF.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
    --> etOPe.rar
      [1] Archive type: RAR
      --> etOPe.exe
          [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
hkt988
发表于 2007-5-6 08:09:24 | 显示全部楼层
已发现的病毒数目:2          NOD32杀[:27:]
马力
发表于 2007-5-6 08:55:39 | 显示全部楼层
驱逐舰报

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
mofunzone
发表于 2007-5-6 10:32:30 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\���һ��.rar'
C:\Documents and Settings\morgan\My Documents\
  ���һ��.rar
    [0] Archive type: RAR
    --> AutoRun.inf
    --> C52B258C.exe
        [DETECTION] Contains signature of the worm WORM/Delf.CC
        [WARNING]   Infected files in archives cannot be repaired!
    --> aRrvF.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> etOPe.rar
        [1] Archive type: RAR
        --> etOPe.exe
            [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
            [WARNING]   Infected files in archives cannot be repaired!
        --> msvcr71.dll
        --> Autorun.inf
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\强行打开摄像头的软件.rar'
C:\Documents and Settings\morgan\My Documents\
  强行打开摄像头的软件.rar
    [0] Archive type: RAR
    --> ·ÉÏèÏÂÔØ.url
    --> ·ÉÏèÏÂÔØ˵Ã÷.txt
    --> ˵Ã÷.txt


End of the scan: 2007年5月5日  19:32
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
      3 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      3 Archives were scanned
      4 Warnings
      0 Notes
      0 Hidden objects were found
欠妳緈諨
发表于 2007-5-6 14:17:46 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
soul20010
发表于 2007-5-6 15:05:50 | 显示全部楼层
deleted: virus Worm.Win32.Delf.cc        File: C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Èä³æÒ»¸ö.rar/C52B258C.exe//UPX
deleted: virus Worm.Win32.Agent.t        File: C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Èä³æÒ»¸ö.rar/aRrvF.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: virus Worm.Win32.Agent.t        File: C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Èä³æÒ»¸ö.rar/etOPe.rar/etOPe.exe//PE_Patch.PECompact//PecBundle//PECompact
KAV-Longhorn
发表于 2007-5-6 15:07:17 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-3-28 16:56 , Processed in 0.146422 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表