誺个可疑一点的

显示全部楼层 · 发表于 2007-5-7 17:14:28

看看有的杀吆

[ 本帖最后由 soyank 于 2007-5-7 18:04 编辑 ]

显示全部楼层 · 发表于 2007-5-7 17:15:30

detected: adware not-a-virus:AdWare.Win32.Virtumonde.hc File: C:\Documents and Settings\Owner\×ÀÃæ\Suspicious.rar/51.exe

显示全部楼层 · 发表于 2007-5-7 17:15:46

Scan performed at: 2007-5-7 17:15:58
Scanning Log
NOD32 version 2245 (20070506) NT
Command line: C:\Documents and Settings\EQ2\桌面\Suspicious.rar
Operating memory - is OK

Date: 7.5.2007 Time: 17:16:03
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Suspicious.rar
C:\Documents and Settings\EQ2\桌面\Suspicious.rar ?RAR ?XPE.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 17:16:03 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-5-7 17:19:54

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-7 17:19
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 51.exe
In archive: C:\Documents and Settings\Administrator\桌面\Suspicious.rar
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Virtumonde.hc (KAV engine), MemScan:Trojan.Vundo.AJ (BD-Engine)
Object: XPE.exe
In archive: C:\Documents and Settings\Administrator\桌面\Suspicious.rar
Status: Suspected virus
Virus: BehavesLike:Win32.VBMalware (BD-Engine)
Object: Suspicious.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: not-a-virus:AdWare.Win32.Virtumonde.hc (KAV engine), MemScan:Trojan.Vundo.AJ, BehavesLike:Win32.VBMalware (BD-Engine)
Analysis complete: 2007-5-7 17:19
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-7 17:24:13

Hello,

XPE.exe_ - Trojan.Win32.VB.axd

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-5-7 17:25:20

不会吧。。。。。这么快就回信了。。。。。

显示全部楼层 · 发表于 2007-5-7 17:25:37

Starting the file scan:

Begin scan in 'F:\样本\Suspicious.rar'
F:\样本\Suspicious.rar
  [0] Archive type: RAR
  --> 51.exe
   [DETECTION] Is the Trojan horse TR/Vundo.AJ.56
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-7 18:12:27

微点

显示全部楼层 · 发表于 2007-5-7 18:14:56

AVAST不报

显示全部楼层 · 发表于 2007-5-7 18:15:30

LZ替换了文件。。。这个nod32不报

誺个可疑一点的

本帖子中包含更多资源

本帖子中包含更多资源