病毒

显示全部楼层 · 发表于 2007-5-6 15:44:19

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\setup.rar'
C:\Documents and Settings\morgan\My Documents\
  setup.rar
[0] Archive type: RAR
--> setup.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-6 15:44:33

报壳

显示全部楼层 · 发表于 2007-5-6 15:44:34

Scan performed at: 2007-5-6 15:44:37
Scanning Log
NOD32 version 2244 (20070505) NT
Command line: C:\Documents and Settings\EQ2\桌面\setup.rar
Operating memory - is OK

Date: 6.5.2007 Time: 15:44:41
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\setup.rar
C:\Documents and Settings\EQ2\桌面\setup.rar ?RAR ?setup.exe - a variant of Win32/Fujacks virus
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:44:48 Total scanning time: 7 sec (00:00:07)

显示全部楼层 · 发表于 2007-5-6 15:45:50

原帖由 欠你幸福 于 2007-5-6 15:44 发表
报壳

avast的确脱不了nsanti。。。这也难怪了。。卡巴和蜘蛛这样的脱壳王都脱不了。。。

显示全部楼层 · 发表于 2007-5-6 15:51:28

原帖由 EQ2 于 2007-5-6 15:44 发表
Scan performed at: 2007-5-6 15:44:37
Scanning Log
NOD32 version 2244 (20070505) NT
Command line: C:\Documents and Settings\EQ2\桌面\setup.rar
Operating memory - is OK

Date: 6.5.2007 Time: ...

原来是国宝烧香！

显示全部楼层 · 发表于 2007-5-6 15:52:41

这个样本已经被人重复发了好多次。。。。。还发这个干什么？

显示全部楼层 · 发表于 2007-5-6 16:10:56

原帖由 EQ2 于 2007-5-6 15:52 发表
这个样本已经被人重复发了好多次。。。。。还发这个干什么？

给了费尔一个机会，费尔过了，但是KIS621杀了

显示全部楼层 · 发表于 2007-5-6 16:11:56

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-6 16:11
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: setup.exe
In archive: C:\Documents and Settings\Administrator\桌面\setup.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.QQRob.eo (KAV engine), GenPack:Generic.Malware.SPBdldg.18BD7611 (BD-Engine)
Object: setup.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.QQRob.eo (KAV engine), GenPack:Generic.Malware.SPBdldg.18BD7611 (BD-Engine)
Analysis complete: 2007-5-6 16:11
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-6 16:14:16

rising

C:\Documents and Settings\moonsilver\桌面\setup.exe>>mian007

Worm.Nimaya.dd

[病毒样本] 病毒

本帖子中包含更多资源

本帖子中包含更多资源

脱了7S

本帖子中包含更多资源