楼主: asdff
收起左侧

[病毒样本] 我刚上的个人电脑安全论坛,小红伞报毒!

[复制链接]
坐在墙头
发表于 2007-5-24 09:05:42 | 显示全部楼层

回复 #10 beat2 的帖子

放NOD32目录下,居然没有免杀NOD32,不得不说是失败
Scan performed at: 2007-5-24 9:03:39
Scanning Log
NOD32 version 2287 (20070523) NT
Command line: C:\Documents and Settings\坐在墙头\桌面\9.zip

Date: 24.5.2007  Time: 09:03:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\坐在墙头\桌面\9.zip
C:\Documents and Settings\坐在墙头\桌面\9.zip ?ZIP ?1explore.exe - Win32/Agent.AIR trojan
C:\Documents and Settings\坐在墙头\桌面\9.zip ?ZIP ?AVG.exe - a variant of Win32/PSW.OnLineGames.NAG trojan
C:\Documents and Settings\坐在墙头\桌面\9.zip ?ZIP ?CFTMON.exe - a variant of Win32/PSW.OnLineGames.NAG trojan
C:\Documents and Settings\坐在墙头\桌面\9.zip ?ZIP ?norton.sys - a variant of Win32/Rootkit.Vanti.EE trojan
C:\Documents and Settings\坐在墙头\桌面\9.zip ?ZIP ?SMSSS.exe - Win32/Agent.ALH trojan
C:\Documents and Settings\坐在墙头\桌面\9.zip ?ZIP ?systemt.exe - Win32/Agent.ALH trojan
C:\Documents and Settings\坐在墙头\桌面\9.zip ?ZIP ?upxdnd.exe - a variant of Win32/PSW.OnLineGames.NAG trojan
Number of scanned files: 9
Number of threats found: 7
Time of completion: 09:03:40 Total scanning time: 0 sec (00:00:00)
mofunzone
发表于 2007-5-24 09:50:42 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\9.zip'
C:\Documents and Settings\morgan\My Documents\
  9.zip
    [0] Archive type: ZIP
    --> 0[4].htm
        [DETECTION] Contains signature of the VBS script virus VBS/Dldr.Virgin
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1explore.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> adv[1].js
        [DETECTION] Is the Trojan horse TR/Click.Agent.D
        [WARNING]   Infected files in archives cannot be repaired!
    --> AVG.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> CFTMON.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SD.10
        [WARNING]   Infected files in archives cannot be repaired!
    --> norton.sys
        [DETECTION] Contains signature of the rootkit RKIT/Agent.air
        [WARNING]   Infected files in archives cannot be repaired!
    --> SMSSS.exe
        [DETECTION] Is the Trojan horse TR/Drop.Delf.aom
        [WARNING]   Infected files in archives cannot be repaired!
        [1] Archive type: RAR SFX (self extracting)
        --> systemt.exe
            [DETECTION] Is the Trojan horse TR/Spy.Agent.QP.1
            [WARNING]   Infected files in archives cannot be repaired!
        --> drivers\npf.sys
        --> Packet.dll
        --> WanPacket.dll
        --> wpcap.dll
    --> systemt.exe
        [DETECTION] Is the Trojan horse TR/Spy.Agent.QP.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.TL.51
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月23日  18:50
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     15 Files were scanned
     10 viruses and/or unwanted programs were found
      1 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      2 Archives were scanned
     11 Warnings
      0 Notes
      0 Hidden objects were found
mofunzone
发表于 2007-5-24 09:51:47 | 显示全部楼层
实际nod根本就没杀全,一共9个,杀出7个而已。。

[Scan path] C:\Documents and Settings\morgan\My Documents\9.zip
>>C:\Documents and Settings\morgan\My Documents\9.zip\0[4].htm\VBScript.0 - Ok
>>C:\Documents and Settings\morgan\My Documents\9.zip\0[4].htm\Script.1 - Ok
>C:\Documents and Settings\morgan\My Documents\9.zip\0[4].htm - Ok
>>C:\Documents and Settings\morgan\My Documents\9.zip\1explore.exe infected with BackDoor.Pomax
>C:\Documents and Settings\morgan\My Documents\9.zip\adv[1].js - Ok
>>C:\Documents and Settings\morgan\My Documents\9.zip\AVG.exe infected with Trojan.PWS.Wsgame.origin
>C:\Documents and Settings\morgan\My Documents\9.zip\CFTMON.exe infected with Trojan.PWS.Wsgame
>C:\Documents and Settings\morgan\My Documents\9.zip\norton.sys - Ok
>>>C:\Documents and Settings\morgan\My Documents\9.zip\SMSSS.exe\systemt.exe infected with Trojan.Onlyone
>>C:\Documents and Settings\morgan\My Documents\9.zip\SMSSS.exe\drivers\npf.sys - Ok
>>C:\Documents and Settings\morgan\My Documents\9.zip\SMSSS.exe\Packet.dll - Ok
>>C:\Documents and Settings\morgan\My Documents\9.zip\SMSSS.exe\WanPacket.dll - Ok
>>C:\Documents and Settings\morgan\My Documents\9.zip\SMSSS.exe\wpcap.dll - Ok
>C:\Documents and Settings\morgan\My Documents\9.zip\SMSSS.exe - archive contains infected objects
>>C:\Documents and Settings\morgan\My Documents\9.zip\systemt.exe infected with Trojan.Onlyone
>C:\Documents and Settings\morgan\My Documents\9.zip\upxdnd.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\morgan\My Documents\9.zip - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 16
Infected objects found: 6
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 282 Kb/s
Scan time: 00:00:02
坐在墙头
发表于 2007-5-24 09:56:22 | 显示全部楼层

回复 #13 mofunzone 的帖子

恩,是的,没有杀全。这个时候开高效能的效果就体现出来了
风雪
发表于 2007-5-24 09:59:40 | 显示全部楼层
杀了一堆。费尔。
mofunzone
发表于 2007-5-24 10:00:50 | 显示全部楼层

回复 #14 坐在墙头 的帖子

nod的高效能在我看来不过是无止境的脱满网速罢了,杀网页不怎么样,杀网马也不怎么样,而且上有gif和flash的网站直接回归拨号般的速度
fanrubin
头像被屏蔽
发表于 2007-5-24 10:06:53 | 显示全部楼层
卡6 也是7个,听说是9个
坐在墙头
发表于 2007-5-24 10:19:40 | 显示全部楼层

回复 #16 mofunzone 的帖子

没有这种情况啊,我这2M,五台电脑
qqq000@qq.com
头像被屏蔽
发表于 2007-5-24 10:26:54 | 显示全部楼层
----------
              [凝逸反毒] (http://hi.baidu.com/503165656)
       [凝逸.扫描病毒引擎-日志]       2007.5.24 10:25:3
文件:F:\070524\9\1explore.exe | 感染:木马 [144>20070517_132257_0259.axx]3
操作:删除文件
文件:F:\070524\9\AVG.exe | 感染:木马 [156>20070523_150350_0225.axx]3
操作:删除文件
文件:F:\070524\9\CFTMON.exe | 感染:Trojan.PWS.Wsgame [39>20070523_150350_0225.axx]3
操作:删除文件
文件:F:\070524\9\SMSSS.exe | 感染:Trojan.Onlyone [50>20070418_185324_0202.axx]3
操作:删除文件
文件:F:\070524\9\systemt.exe | 感染:Trojan.Onlyone [51>20070418_185324_0202.axx]3
操作:删除文件
文件:F:\070524\9\upxdnd.exe | 感染:Trojan.PWS.Wsgame [5>20070523_150350_0225.axx]3
操作:删除文件

扫描完成|病毒:6 文件:9|耗时:1082
----------

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Anti@9.cn
发表于 2007-5-24 11:10:35 | 显示全部楼层
现在没反映了
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-22 18:01 , Processed in 0.100862 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表