4个

显示全部楼层 · 发表于 2007-5-11 01:01:29

131312

[ 本帖最后由 tonger2003 于 2007-5-11 01:03 编辑 ]

显示全部楼层 · 发表于 2007-5-11 01:05:45

咖啡启发

显示全部楼层 · 发表于 2007-5-11 01:07:45

[:27:] Filseclab勾上探测未知壳以后马上就报了4个加壳文件
Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-5-11 1:05:58,Heuri.Possible/Packed,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>6.exe,Manual scan
2007-5-11 1:05:58,Heuri.Possible/Packed,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>5.exe,Manual scan
2007-5-11 1:05:58,Heuri.Possible/Packed,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>3.exe,Manual scan
2007-5-11 1:05:58,Heuri.Possible/Packed,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>2.exe,Manual scan

[:26:] 以后有时间再来测试动态防御

显示全部楼层 · 发表于 2007-5-11 01:36:41

瑞星能杀3个，都是TRJ.PSW.ONLINEGAME 文件后面有提示MAIN007，是壳的种类嘛？

显示全部楼层 · 发表于 2007-5-11 01:50:51

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-9
Start time: 2007-5-11 1:50
Engine(s): KAV engine (AVK 17.5133), BD-Engine (BD 17.4713)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 2.exe
Path: C:\Documents and Settings\Administrator\桌面\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.Nilage.afk (KAV engine)
Object: 3.exe
Path: C:\Documents and Settings\Administrator\桌面\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.sd (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: 5.exe
Path: C:\Documents and Settings\Administrator\桌面\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: 6.exe
Path: C:\Documents and Settings\Administrator\桌面\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine)
Analysis complete: 2007-5-11 1:50
4 files checked
4 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-11 02:47:09

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\桌面.rar'
C:\Documents and Settings\morgan\My Documents\
  桌面.rar
[0] Archive type: RAR
--> 2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 6.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-11 03:36:42

显示全部楼层 · 发表于 2007-5-11 03:45:00

显示全部楼层 · 发表于 2007-5-11 06:44:30

Scan performed at: 2007-5-11 6:44:15
Scanning Log
NOD32 version 2256 (20070510) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面.rar
Operating memory - is OK

Date: 11.5.2007 Time: 06:44:20
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面.rar
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?2.exe - a variant of Win32/PSW.Agent.NDF trojan
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?3.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?5.exe - a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 06:44:37 Total scanning time: 17 sec (00:00:17)

显示全部楼层 · 发表于 2007-5-11 06:56:57

AVK一定优先让avp扫描的，BD动作慢了就吃不到了，我的BD吃的很舒服了

[病毒样本] 4个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源