MD5:823c72 随机7位数字样本

显示全部楼层 · 发表于 2007-6-6 16:07:59

第一次,不知道格式对不对

过了卡吧的,呵呵

显示全部楼层 · 发表于 2007-6-6 16:09:56

Scan performed at: 2007-6-6 16:11:04
Scanning Log
NOD32 version 2312 (20070606) NT
Command line: C:\Documents and Settings\EQ2\桌面\autorun-yeyinhi.rar
Operating memory - is OK

Date: 6.6.2007 Time: 16:11:08
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\autorun-yeyinhi.rar
C:\Documents and Settings\EQ2\桌面\autorun-yeyinhi.rar ?RAR ?yeyinhi.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:11:08 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-6-6 16:10:49

卡吧7没挂启发报

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=82918 is infected with Worm.Generic virus

显示全部楼层 · 发表于 2007-6-6 16:16:09

显示全部楼层 · 发表于 2007-6-6 16:16:33

原帖由 kp2006 于 2007-6-6 16:10 发表
卡吧7没挂启发报

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=82918 is infected with Worm.Generic virus

晕
为什么我的启发不报
我已经把启发开到最高等级了

显示全部楼层 · 发表于 2007-6-6 16:31:03

显示全部楼层 · 发表于 2007-6-6 16:32:13

Start of the scan: 2007年6月6日星期三  16:33

Starting the file scan:

Begin scan in 'E:\autorun-yeyinhi.rar'
E:\autorun-yeyinhi.rar
  [0] Archive type: RAR
  --> yeyinhi.exe
   [DETECTION] Is the Trojan horse TR/Agent.25485
   [INFO]    A backup was created as '46da71cc.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-6 16:44:54

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-6
Start time: 2005-6-6 16:45
Engine(s): KAV engine (AVK 17.5733), BD-Engine (BD 17.5315)
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: yeyinhi.exe
Path: C:\Documents and Settings\Administrator\桌面\autorun-yeyinhi
Status: Move file into quarantine
Virus: Generic.Malware.SP!dldPk!g.CA835226 (BD-Engine)
Analysis complete: 2005-6-6 16:45
2 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-6-6 17:35:42

原帖由 Redevil 于 2007-6-6 16:16 发表

晕
为什么我的启发不报
我已经把启发开到最高等级了

貌似版本不同直接右键扫描能力也不同,我之前在AVPCLUB看过版号085的扫描力比119还强

显示全部楼层 · 发表于 2007-6-6 18:11:10

[Scan path] C:\Documents and Settings\Administrator\桌面\autorun-yeyinhi.rar
>C:\Documents and Settings\Administrator\桌面\autorun-yeyinhi.rar\autorun.inf - Ok
>>C:\Documents and Settings\Administrator\桌面\autorun-yeyinhi.rar\yeyinhi.exe probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\桌面\autorun-yeyinhi.rar - archive contains infected objects

MD5:823c72 随机7位数字样本

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源