一个

显示全部楼层 · 发表于 2007-5-14 15:57:08

Výsledky hĺbkovej heuristickej analýzy:

Testovaný súbor bol oznečený ako: Infikovaný
Názov infiltrácie: Win32/BlackHole.NAA trojan
Popis hrozby nie je k dispozícii. Poznámka: Tento súbor obsahuje už známu hrozbu. Žiadna ďalšia analýza nie je potrebná.

显示全部楼层 · 发表于 2007-5-14 15:59:10

KIS 7.99 网络监控飘了　　　实机不测

显示全部楼层 · 发表于 2007-5-14 16:43:13

过红伞，开心，上报了，附上一个运行后生成的文件，运行后没发现什么异常，HIPS看下动作啦

显示全部楼层 · 发表于 2007-5-14 16:48:29

Scanning Log
NOD32 version 2264 (20070514) NT
Command line: C:\Documents and Settings\fengyeyin\桌面\33. ?
?rar
Checking CRC of NOD32.EXE: Status OK
C:\Program Files\Eset\nod32.exe - is OK
Scanning memory: Not performed (option disabled)
Scanning MBR and boot sectors: Not performed (option  ?
?disabled)
Date: 14.5.2007  Time: 16:48:32
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\fengyeyin\桌面\33.rar
C:\Documents and Settings\fengyeyin\桌面\33.rar ?RAR ?33. ?
?exe - Win32/BlackHole.NAA trojan
C:\Documents and Settings\fengyeyin\桌面\33.rar:Zone. ?
?Identifier - is OK
Number of scanned files: 2
Number of threats found: 1
Time of completion: 16:48:34 Total scanning time: 2 sec  ?
?(00:00:02)

显示全部楼层 · 发表于 2007-5-14 22:42:31

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\33.rar'
C:\Documents and Settings\morgan\My Documents\
  33.rar
[0] Archive type: RAR
--> 33.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Graybird.DFC2BD6E Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-14 23:05:46

卡巴扫描没报毒:
2007-05-14 23:04:25 File: D:\sharesoft\!vir\33.rar:Zone.Identifier ok scanned
请问一下,那个:Zone.Identifier是是什么?应该跟NTFS有关吧?

显示全部楼层 · 发表于 2007-5-14 23:56:39

detected: Trojan program Backdoor.Win32.BlackHole.i URL: http://bbs.kafan.cn/attachment.php?aid=69731//33.exe//NSPack
detected: Trojan program Backdoor.Win32.BlackHole.i URL: http://bbs.kafan.cn/attachment.p ... _Server.exe//NSPack

显示全部楼层 · 发表于 2007-5-15 00:24:37

2007-5-15 0:25:06 Safe'n'Sec 扫描报告

2007-5-15 0:25:06 扫描开始时间: 2007-5-15 0:25:06

2007-5-15 0:25:06 恶意软件处理:
2007-5-15 0:25:06 扫描级别: 完全

2007-5-15 0:25:14 D:\33.rar 被感染 Generic.Graybird.DFC2BD6E 删除
2007-5-15 0:25:14 扫描区域:

2007-5-15 0:25:14 D:\33.rar
2007-5-15 0:25:14
2007-5-15 0:25:14 已扫描对象: 1
2007-5-15 0:25:14 已发现恶意对象: 1
2007-5-15 0:25:14 已删除恶意对象: 1

2007-5-15 0:25:14 扫描完成时间: 2007-5-15 0:25:14

显示全部楼层 · 发表于 2007-5-15 00:27:23

MCAFEE可杀了

[病毒样本] 一个

本帖子中包含更多资源

本帖子中包含更多资源