kv主动防御拦截 未知可疑病毒

kp2006

我没有导入最新主动防御规则

结果 浏览一个病毒网站

红心王子

费尔报了两个启发式

soul20010

BitDefender Antivirus Plus v10
桌面.rar=>svch00st9.exe        Infected: Generic.Malware.Sdld!gPWS.43FE67F5
桌面.rar=>~tmp4141.exe        Infected: Generic.Malware.WBdld.DFEBE15C
桌面.rar=>svch00st3.exe        Infected: Generic.Malware.SdldPWS.39CBDC9E
桌面.rar=>svch00st4.exe        Infected: Trojan.PWS.OnLineGames.ARI
桌面.rar=>svch00st6.exe        Infected: Trojan.PWS.OnLineGames.ARI
桌面.rar=>~tmp1888.exe        Infected: Generic.Malware.WBdld.DFEBE15C

红心王子

KV的监控表现的也是不俗的

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\桌面.rar'
C:\Documents and Settings\morgan\My Documents\
  桌面.rar
    [0] Archive type: RAR
    --> svc10.exe
    --> svch00st9.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> svch00st1.exe
    --> svch00st2.exe
    --> ~tmp4141.exe
        [DETECTION] Contains signature of the worm WORM/SdBot.196017
        [WARNING]   Infected files in archives cannot be repaired!
    --> svch00st3.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> svch00st4.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> svch00st5.exe
    --> svch00st6.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> svch00st7.exe
    --> ~tmp1888.exe
        [DETECTION] Contains signature of the worm WORM/SdBot.196017
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月8日  21:09
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
      6 viruses and/or unwanted programs were found
      4 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      7 Warnings
      0 Notes
      0 Hidden objects were found

风野胤

扫描日志
NOD32版本 2250 (20070508) NT
命令行： C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar
正在检查NOD32.EXE文件的CRC：状态正常
扫描系统内存中：没有进行 (选项已关闭)
日期： 9.5.2007  时间：12:07:48
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar
C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar >>RAR >>svch00st9.exe - Win32/PSW.Agent.NCC 木马的变种
C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar >>RAR >>~tmp4141.exe - 可能是 Win32/Genetik 木马 的一个变种
C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar >>RAR >>svch00st3.exe - Win32/PSW.Agent.NDF 木马的变种
C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar >>RAR >>svch00st4.exe - Win32/PSW.Agent.NCC 木马的变种
C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar >>RAR >>svch00st6.exe - Win32/PSW.Agent.NCC 木马的变种
C:\Documents and Settings\Administrator.C0D29218D7F74F0\桌面\桌面.rar >>RAR >>~tmp1888.exe - 可能是 Win32/Genetik 木马 的一个变种
已扫描的文件数目：11
已发现的病毒数目：6
完成时间： 12:07:49 总扫描时间：1 秒 (00:00:01)

mofunzone

We received the following archive files:
File ID          Filename          Size (Byte)         Result
539981          桌面.rar         2.18 KB         OK

A listing of files contained inside archives alongside their results can be found below:
File ID          Filename          Size (Byte)         Result
201736          svch00st7.exe          424 B          CLEAN
201736          svch00st7.exe          424 B          CLEAN
201736          svch00st7.exe          424 B          CLEAN
201736          svch00st7.exe          424 B          CLEAN
201736          svch00st7.exe          424 B          CLEAN

风野胤

原帖由 mofunzone 于 2007-5-9 12:10 发表
We received the following archive files:
File ID          Filename          Size (Byte)         Result
539981          桌面.rar         2.18 KB         OK

A listing of files contained inside archives alongside their results can be f ...

这是什么杀软

wangjay1980

detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/svch00st9.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/~tmp4141.exe//FSG
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/svch00st3.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/svch00st4.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/svch00st6.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/~tmp1888.exe//FSG

欠妳緈諨

AVAST杀了5个