刚找的一包

显示全部楼层 · 发表于 2007-5-8 17:53:51

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!
===============================================
___________病毒查杀结果__________________

===============================================
2007年5月8日17时54分35秒开始查杀C:\Documents and Settings\Administrator\桌面\0707\gif
威胁性文件：C:\Documents and Settings\Administrator\桌面\0707\gif\postcard.gif\svchost.exe
=========================================
_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------
2007年5月8日17时54分36秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

显示全部楼层 · 发表于 2007-5-8 17:55:58

BitDefender Antivirus Plus v10
gif.rar=>postcard.gif\script.ini Infected: Backdoor.IRC.Zapchast.PO
gif.rar=>postcard.gif\sup.bat Infected: Trojan.Zapchas.F
gif.rar=>postcard.gif\sup.reg Infected: Trojan.Zapchas.F
gif.rar=>postcard.gif\svchost.exe Infected: Win32.Parite.B

显示全部楼层 · 发表于 2007-5-8 17:58:03

2个

显示全部楼层 · 发表于 2007-5-8 17:58:03

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-8 17:57
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: mirc.ini
Path: C:\Documents and Settings\Administrator\桌面\gif\postcard.gif
Status: Move file into quarantine
Virus: Backdoor.IRC.Zapchast (KAV engine)
Object: script.ini
Path: C:\Documents and Settings\Administrator\桌面\gif\postcard.gif
Status: Move file into quarantine
Virus: Backdoor.IRC.Zapchast (KAV engine), Backdoor.IRC.Zapchast.PO (BD-Engine)
Object: sup.bat
Path: C:\Documents and Settings\Administrator\桌面\gif\postcard.gif
Status: Move file into quarantine
Virus: Trojan.Zapchas.F (BD-Engine)
Object: sup.reg
Path: C:\Documents and Settings\Administrator\桌面\gif\postcard.gif
Status: Virus removed
Virus: Backdoor.IRC.Zapchast (KAV engine), Trojan.Zapchas.F (BD-Engine)
Object: svchost.exe
Path: C:\Documents and Settings\Administrator\桌面\gif\postcard.gif
Status: Move file into quarantine
Virus: Backdoor.Win32.mIRC-based (KAV engine)
Analysis complete: 2007-5-8 17:57
15 files checked
5 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-8 18:02:31

瑞星报1个

显示全部楼层 · 发表于 2007-5-8 18:03:48

Scan performed at: 2007-5-8 18:03:28
Scanning Log
NOD32 version 2248 (20070507) NT
Command line: D:\gif.rar
Operating memory - is OK

Date: 8.5.2007 Time: 18:03:34
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\gif.rar
D:\gif.rar ?RAR ?postcard.gif\ident.txt - IRC/Zapchast.K trojan
D:\gif.rar ?RAR ?postcard.gif\mirc.ini - IRC/Zapchast trojan
D:\gif.rar ?RAR ?postcard.gif\script.ini - probably a variant of IRC/Zapchast.J trojan
D:\gif.rar ?RAR ?postcard.gif\sup.bat - IRC/Zapchast.H trojan
D:\gif.rar ?RAR ?postcard.gif\sup.reg - IRC/Cloner.AT trojan
D:\gif.rar ?RAR ?postcard.gif\svchost.exe - Win32/Parite.B virus
Number of scanned files: 16
Number of threats found: 6
Number of active threats: 1
Time of completion: 18:03:35 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-5-8 18:12:19

kv在线报2个

显示全部楼层 · 发表于 2007-5-8 18:17:04

咖啡报3个木马1个病毒。

显示全部楼层 · 发表于 2007-5-8 18:25:53

vba 6
F:\gif.rar:<RAR>\postcard.gif\ident.txt : infected Trojan.IRC.Zapchast.K#1
F:\gif.rar:<RAR>\postcard.gif\mirc.ini : infected Backdoor.IRC.Zapchast#187
F:\gif.rar:<RAR>\postcard.gif\script.ini : infected Backdoor.IRC.Zapchast#219
F:\gif.rar:<RAR>\postcard.gif\sup.bat : infected Trojan.IRC.Zapchast.H#1
F:\gif.rar:<RAR>\postcard.gif\sup.reg : infected Trojan.IRC.Cloner.AT#1
F:\gif.rar:<RAR>\postcard.gif\svchost.exe : infected Win32.Parite.B

[病毒样本] 刚找的一包

本帖子中包含更多资源

本帖子中包含更多资源