9个

显示全部楼层 · 发表于 2007-5-8 16:22:26

311212

显示全部楼层 · 发表于 2007-5-8 16:23:41

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!
===============================================
___________病毒查杀结果__________________

===============================================
2007年5月8日16时24分9秒开始查杀C:\Documents and Settings\Administrator\桌面\0707\TDDOWNLOAD
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\0707\TDDOWNLOAD\4.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\0707\TDDOWNLOAD\8.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\0707\TDDOWNLOAD\9.exe 操作:阻止运行
=========================================
_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\0707\TDDOWNLOAD\4.exe 带壳文件:UPX加壳
-----------------------------------------
2007年5月8日16时24分11秒收起线程…100% 查杀完毕！
扫描文件：9查杀病毒：4

显示全部楼层 · 发表于 2007-5-8 16:24:49

瑞星1个

D:\Documents and Settings\Administrator\桌面\TDDO
WNLOAD.rar>>4.exe

显示全部楼层 · 发表于 2007-5-8 16:25:43

Scan performed at: 2007-5-8 16:25:43
Scanning Log
NOD32 version 2248 (20070507) NT
Command line: C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD
Operating memory - is OK

Date: 8.5.2007 Time: 16:25:47
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\2.exe - a variant of Win32/PSW.Agent.NDF trojan
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\3.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\4.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\5.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\8.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\xuik.exe - probably a variant of Win32/TrojanDownloader.Delf.NQX trojan
Number of scanned files: 9
Number of threats found: 6
Number of files cleaned: 6
Time of completion: 16:25:54 Total scanning time: 7 sec (00:00:07)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-5-8 16:26:25

6个都是用启发查出来的。。。

显示全部楼层 · 发表于 2007-5-8 16:28:17

江民

显示全部楼层 · 发表于 2007-5-8 16:29:01

越来越觉得nod32的病毒库太小。。。。。

显示全部楼层 · 发表于 2007-5-8 16:31:02

研究启发引擎去了

显示全部楼层 · 发表于 2007-5-8 16:31:13

BitDefender Antivirus Plus v10
TDDOWNLOAD.rar=>5.exe Infected: Generic.Malware.SdldgPWS.C8B2BAE7
TDDOWNLOAD.rar=>8.exe Suspect: Dropped:Generic.Malware.Fdld.38996436
TDDOWNLOAD.rar=>xuik.exe Infected: Generic.Malware.PWBdldPk.92617F89
TDDOWNLOAD.rar=>1.exe Infected: Trojan.PWS.OnLineGames.FK
TDDOWNLOAD.rar=>2.exe Infected: Generic.Malware.SdldPWS.04CDCF09
TDDOWNLOAD.rar=>3.exe Infected: Trojan.PWS.OnLineGames.ARI

显示全部楼层 · 发表于 2007-5-8 16:32:24

现在看到nod32报启发式有种不爽的感觉。。。

[病毒样本] 9个

本帖子中包含更多资源

本帖子中包含更多资源

回复 #7 EQ2 的帖子