楼主: moonsilver
收起左侧

[病毒样本] 97%杀软挂,来玩玩

[复制链接]
netsurfe
发表于 2007-5-8 07:32:31 | 显示全部楼层
KIS 307

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
sfdx
发表于 2007-5-8 10:05:52 | 显示全部楼层
BD没事呀


C:\Documents and Settings\sui\桌面\XPE.rar=>XPE.exe        可疑: BehavesLike:Win32.VBMalware
C:\Documents and Settings\sui\桌面\XPE.rar=>XPE.exe        杀毒失败
C:\Documents and Settings\sui\桌面\XPE.rar=>XPE.exe        删除
cheninot
发表于 2007-5-8 11:11:59 | 显示全部楼层
Suspicious Files and Miscellaneous Uploads
Thank you for your submission. Below you can see the current status of the uploaded files.

--------------------------------------------------------------------------------

We received the following archive files:

File ID  Filename  Size (Byte) Result
537995  XPE.rar 9.25 KB OK
A listing of files contained inside archives alongside their results can be found below:
File ID  Filename  Size (Byte) Result
537952  XPE.exe  36 KB  MALWARE

Please find a detailed report concerning each individual sample below:
Filename Result
XPE.exe  MALWARE

The file 'XPE.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/VB.axd.11. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.38.01.106.
==================================================
AntiVir PersonalEdition Classic
Report file date: 2007年5月8日  11:11
Scanning for 771109 virus strains and unwanted programs.
Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Version information:
BUILD.DAT    : 244           14437 Bytes  2007-04-16 16:06:00
AVSCAN.EXE   : 7.0.4.15     282664 Bytes  2007-04-28 08:14:38
AVSCAN.DLL   : 7.0.4.4       33832 Bytes  2007-03-27 05:31:54
LUKE.DLL     : 7.0.4.11     143400 Bytes  2007-03-27 05:26:04
LUKERES.DLL  : 7.0.4.0       10280 Bytes  2007-03-19 05:18:59
ANTIVIR0.VDF : 6.35.0.1    7371264 Bytes  2006-05-31 06:14:26
ANTIVIR1.VDF : 6.37.1.151  4303360 Bytes  2007-02-23 09:49:44
ANTIVIR2.VDF : 6.38.1.100  1168384 Bytes  2007-05-06 00:13:52
ANTIVIR3.VDF : 6.38.1.107    25088 Bytes  2007-05-07 00:13:52
AVEWIN32.DLL : 7.4.0.15    2421248 Bytes  2007-04-24 07:28:38
AVWINLL.DLL  : 1.0.0.7       14376 Bytes  2007-02-26 03:36:26
AVPREF.DLL   : 7.0.2.1       24616 Bytes  2007-03-27 05:31:50
AVREP.DLL    : 7.0.0.1      155688 Bytes  2007-04-27 09:48:34
AVPACK32.DLL : 7.3.0.8      360488 Bytes  2007-03-27 01:48:28
AVREG.DLL    : 7.0.1.2       31784 Bytes  2007-03-15 02:05:08
AVEVTLOG.DLL : 7.0.0.18      86056 Bytes  2007-03-27 05:16:05
AVARKT.DLL   : 1.0.0.12     274472 Bytes  2007-03-27 05:31:12
NETNT.DLL    : 7.0.0.0        7720 Bytes  2007-03-08 04:09:42
RCIMAGE.DLL  : 7.0.1.15    2228264 Bytes  2007-03-13 03:46:18
RCTEXT.DLL   : 7.0.45.0      86056 Bytes  2007-03-19 05:42:42
Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\cw\LOCALS~1\Temp\c11b60b9.avp
Logging..........................: low
Primary action...................: repair
Secondary action.................: quarantine
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: E:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,
Start of the scan: 2007年5月8日  11:11
Starting the file scan:
Begin scan in 'E:\XPE.rar'

End of the scan: 2007年5月8日  11:11
Used time: 00:02 min
The scan has been done completely.
      0 Scanning directories
      2 Files were scanned
      0 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found


红伞说6.38.01.106版本的病毒库已经可以查杀,现在是6.38.01.107版的咋还是没反应
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-3-28 21:56 , Processed in 0.090841 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表