转一些

sdbsky

测试........................

风野胤

Scanning Log
NOD32 version 2264 (20070514) NT
Command line: C:\Documents and Settings\fengyeyin\桌面\ ?
?virus.rar
Checking CRC of NOD32.EXE: Status OK
C:\Program Files\Eset\nod32.exe - is OK
Scanning memory: Not performed (option disabled)
Scanning MBR and boot sectors: Not performed (option  ?
?disabled)
Date: 14.5.2007  Time: 16:53:38
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\fengyeyin\桌面\virus.rar
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??8021AB08.DLL - probably a variant of Win32/Agent.NEO  ?
?trojan
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??msccrt.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??msccrt.dll - is OK
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??upxdnd.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??winform.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??revbrev.EXE - is OK
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??winform.dll - is OK
C:\Documents and Settings\fengyeyin\桌面\virus.rar ?RAR  ?
??upxdnd.exe - a variant of Win32/PSW.Agent.NDF trojan
C:\Documents and Settings\fengyeyin\桌面\virus.rar:Zone. ?
?Identifier - is OK
Number of scanned files: 9
Number of threats found: 5
Time of completion: 16:53:38 Total scanning time: 0 sec  ?
?(00:00:00)


nod不杀的那个exe是死的
还有两个dll运行不了

moonsilver

瑞星全挂，送报……

绅博周幸

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Chou\My Documents\virus.rar'
C:\Documents and Settings\Chou\My Documents\virus.rar
  [0] Archive type: RAR
  --> 8021AB08.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> msccrt.exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.43
  --> msccrt.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> upxdnd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> winform.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> winform.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> upxdnd.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

风野胤

原帖由 绅博周幸 于 2007-5-14 16:59 发表
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Chou\My Documents\virus.rar'
C:\Documents and Settings\Chou\My Documents\virus.rar
  [0] Archive type: RAR
  --> 8021AB08.DL ...

都是报风险程序

ps 周版再发点啊
无聊了

[ 本帖最后由 风野胤 于 2007-5-14 17:03 编辑 ]

绅博周幸

原帖由 风野胤 于 2007-5-14 17:01 发表

都是报风险程序

哈哈，又一次见识了红伞强大的启发，这个不是风险程序哦 ，红伞启发6个，看来也是很依赖启发的

风野胤

suspicious不就是可疑的意思么
周版 再发一点毒
反正我也是闲着

wangjay1980

detected: Trojan program Backdoor.Win32.Agent.ahj        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/8021AB08.DLL
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/msccrt.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.qh        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/upxdnd.dll
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/winform.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.qh        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/upxdnd.exe

鼻耳盖子

剩下的都是ｄｌｌ文件了

木马名称:Trojan-PSW.Win32.Agent.cql
程序:
I:\TEST\070514\9\VIRUS\MSCCRT.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.rm
程序:
I:\TEST\070514\9\VIRUS\WINFORM.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.dbn
程序:
I:\TEST\070514\9\VIRUS\UPXDND.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

451102995

Begin scan in 'C:\Homes\User\桌面\virus.rar'
C:\Homes\User\桌面\virus.rar
  [0] Archive type: RAR
  --> 8021AB08.DLL
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.366 Backdoor server programs
  --> msccrt.exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.43
  --> msccrt.dll
      [DETECTION] Is the Trojan horse TR/PSW.12288.74
  --> upxdnd.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QH.66
  --> winform.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ASW.4
  --> winform.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ASW.5
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QH.55
      [INFO]      A backup was created as '46bb838e.qua'  ( QUARANTINE )
      [INFO]      The file was successfully wiped!
      [INFO]      The file was deleted!