是个杀软都报的已知木马，不过NOD报启发

显示全部楼层 · 发表于 2007-5-7 17:19:21

装了geswall冲突
卸了装了个中网，连hips加墙了
还不错，接着抓

显示全部楼层 · 发表于 2007-5-7 17:20:22

Scan performed at: 2007-5-7 17:20:24
Scanning Log
NOD32 version 2245 (20070506) NT
Command line: C:\Documents and Settings\EQ2\桌面\wm.rar
Operating memory - is OK

Date: 7.5.2007 Time: 17:20:28
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wm.rar
C:\Documents and Settings\EQ2\桌面\wm.rar ?RAR ?wm.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 17:20:29 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-5-7 17:20:52

detected: Trojan program Trojan-Downloader.Win32.Delf.awi File: C:\Documents and Settings\Owner\×ÀÃæ\wm.rar/wm.exe//NSPack

显示全部楼层 · 发表于 2007-5-7 17:22:00

Starting the file scan:

Begin scan in 'F:\样本\wm.rar'
F:\样本\wm.rar
  [0] Archive type: RAR
  --> wm.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-7 17:23:13

记得中网只开了一个接口，你申请到了测试号？

显示全部楼层 · 发表于 2007-5-7 17:24:08

吐血了。。。。。BD也报启发。。

显示全部楼层 · 发表于 2007-5-7 17:25:12

显示全部楼层 · 发表于 2007-5-7 17:27:19

原帖由 jlennon 于 2007-5-7 17:23 发表
记得中网只开了一个接口，你申请到了测试号？

我是内测会员

显示全部楼层 · 发表于 2007-5-7 17:31:53

什么是中网

显示全部楼层 · 发表于 2007-5-7 17:32:16

bbs.netchina.com.cn

[病毒样本] 是个杀软都报的已知木马，不过NOD报启发

本帖子中包含更多资源

报未知也要上报

回复 #1 lanvin 的帖子

本帖子中包含更多资源