sxs 和 viking [MD5: 3829E8 CCC5A3 3829E8 E64A6C AE4079]

显示全部楼层 · 发表于 2007-6-6 23:02:24

老品种，不过在论坛没搜到相同的md5值。先杀为快。

图标挺好看的啊。

显示全部楼层 · 发表于 2007-6-6 23:03:29

deleted: virus Worm.Win32.Viking.n File: C:\Documents and Settings\Owner\×ÀÃæ\sxs,viking.rar/rundl132.exe
deleted: virus Worm.Win32.Viking.n File: C:\Documents and Settings\Owner\×ÀÃæ\sxs,viking.rar/Logo1_.exe
deleted: adware not-a-virus:AdWare.Win32.Agent.bx File: C:\Documents and Settings\Owner\×ÀÃæ\sxs,viking.rar/MScb0.exe
deleted: virus Worm.Win32.Viking.n File: C:\Documents and Settings\Owner\×ÀÃæ\sxs,viking.rar/sxs.exe
deleted: Trojan program Trojan-PSW.Win32.Delf.pb File: C:\Documents and Settings\Owner\×ÀÃæ\sxs,viking.rar/sxs.exe.exe//FSG

显示全部楼层 · 发表于 2007-6-6 23:09:53

Scan performed at: 2007-6-6 23:11:01
Scanning Log
NOD32 version 2313 (20070606) NT
Command line: C:\Documents and Settings\EQ2\桌面\sxs,viking.rar
Operating memory - is OK

Date: 6.6.2007 Time: 23:11:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\sxs,viking.rar
C:\Documents and Settings\EQ2\桌面\sxs,viking.rar ?RAR ?rundl132.exe - Win32/Viking.N virus - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\sxs,viking.rar ?RAR ?Logo1_.exe - Win32/Viking.N virus - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\sxs,viking.rar ?RAR ?sxs.exe - Win32/Viking.N virus - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\sxs,viking.rar ?RAR ?sxs.exe.exe - probably a variant of Win32/PSW.QQPass.JF trojan
Number of scanned files: 6
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 23:11:06 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-6-6 23:14:41

[0] Archive type: RAR
  --> rundl132.exe
   [DETECTION] Contains signature of the Windows virus W32/Viking.Q
  --> Logo1_.exe
   [DETECTION] Contains signature of the Windows virus W32/Viking.Q
  --> MScb0.exe
   [DETECTION] Is the Trojan horse TR/Agent.IE.3
  --> sxs.exe
   [DETECTION] Contains signature of the Windows virus W32/Viking.Q
  --> sxs.exe.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQPass.LR.1
   [WARNING] The file was ignored!

End of the scan: 2007年6月6日  23:15
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   6 Files were scanned
   5 viruses and/or unwanted programs were found

显示全部楼层 · 发表于 2007-6-6 23:21:30

呵呵，感谢mcafee区做ED的朋友
mcafee报ED

显示全部楼层 · 发表于 2007-6-6 23:44:18

2007/6/6 23:43:08 Scanning Log
2007/6/6 23:43:08 Version of virus signature database: 2313 (20070606)
2007/6/6 23:43:08 Date: 6.6.2007 Time: 23:43:08
2007/6/6 23:43:08 Scanned disks, folders and files: E:\病毒测试\
2007/6/6 23:43:11 E:\病毒测试\sxs,viking.rar - multiple threats - deleted
2007/6/6 23:43:11 E:\病毒测试\sxs,viking.rar » RAR » rundl132.exe - Win32/Viking.N virus
2007/6/6 23:43:11 E:\病毒测试\sxs,viking.rar » RAR » Logo1_.exe - Win32/Viking.N virus
2007/6/6 23:43:11 E:\病毒测试\sxs,viking.rar » RAR » sxs.exe - Win32/Viking.N virus
2007/6/6 23:43:11 E:\病毒测试\sxs,viking.rar » RAR » sxs.exe.exe - probably a variant of Win32/PSW.QQPass.JF trojan
2007/6/6 23:43:11 Number of scanned files: 6
2007/6/6 23:43:11 Number of threats found: 4
2007/6/6 23:43:11 Time of completion: 23:43:11 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-6-6 23:49:54

以删除数目为准，AVAST杀了5个

显示全部楼层 · 发表于 2007-6-6 23:51:48

rundl132.exe - Win32/Viking.N 病毒
Logo1_.exe - Win32/Viking.N 病毒
sxs.exe - Win32/Viking.N 病毒
sxs.exe.exe - 可能是 Win32/PSW.QQPass.JF 木马的一个变种

显示全部楼层 · 发表于 2007-6-7 00:48:54

weidian
解压报两个
其余的运行报

显示全部楼层 · 发表于 2007-6-7 06:35:50

Virus: Worm.Win32.Viking.n (3x), not-a-virus:AdWare.Win32.Agent.bx, Trojan-PSW.Win32.Delf.pb

Virus found while downloading Web content.

Address: bbs.kafan.cn

[病毒样本] sxs 和 viking [MD5: 3829E8 CCC5A3 3829E8 E64A6C AE4079]

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源