第二个样本

显示全部楼层 · 发表于 2007-5-13 01:14:11

[:05:]

显示全部楼层 · 发表于 2007-5-13 01:17:06

Scan performed at: 2007-5-13 1:17:24
Scanning Log
NOD32 version 2262 (20070512) NT
Command line: C:\Documents and Settings\EQ2\桌面\spam.rar
Operating memory - is OK

Date: 13.5.2007 Time: 01:17:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\spam.rar
C:\Documents and Settings\EQ2\桌面\spam.rar ?RAR ?spam.exe - a variant of Win32/TrojanDownloader.CWS.I trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 01:17:29 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-13 01:20:32

已检测到: 木马程序 Trojan-Downloader.Win32.CWS.ak URL: http:/bbs.kafan.cn/attachment.php?aid=68912/spam.exe/PE_Patch.UPX/UPX

显示全部楼层 · 发表于 2007-5-13 02:27:25

2007-5-13 2:32:29 Safe'n'Sec Scan report

2007-5-13 2:32:30 Scan start time: 2007-5-13 2:32:30

2007-5-13 2:32:30 Action applied to detected malware:
2007-5-13 2:32:30 Scan level: Full

2007-5-13 2:32:47 C:\Documents and Settings\Wao\桌面\spam.rar Infected Generic.Dld.CWS.DE00516A Moved to quarantine
2007-5-13 2:32:47 Scan area:

2007-5-13 2:32:47 C:\Documents and Settings\Wao\桌面\spam.rar
2007-5-13 2:32:48
2007-5-13 2:32:48 Objects scanned: 1
2007-5-13 2:32:48 Malicious objects detected: 1
2007-5-13 2:32:48 Malicious objects deleted / removed: 1

2007-5-13 2:32:48 Scan completion time: 2007-5-13 2:32:48

显示全部楼层 · 发表于 2007-5-13 02:52:06

费尔一只

显示全部楼层 · 发表于 2007-5-13 03:01:21

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\spam.rar'
C:\Documents and Settings\morgan\My Documents\
  spam.rar
[0] Archive type: RAR
--> spam.exe
      [DETECTION] Is the Trojan horse TR/Dldr.CWS.M
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-13 03:23:20

这个样本强！！冰刃都无法干掉它的进程！！

强制删除了。。
有联网动作，恐怕下载的东西也会很强～呵呵

显示全部楼层 · 发表于 2007-5-13 03:44:44

原帖由 miller239 于 2007-5-13 03:23 发表
这个样本强！！冰刃都无法干掉它的进程！！
强制删除了。。
有联网动作，恐怕下载的东西也会很强～呵呵

你把下载的东西整下来吧

显示全部楼层 · 发表于 2007-5-13 04:26:17

显示全部楼层 · 发表于 2007-5-13 07:07:55

[病毒样本] 第二个样本

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源