62CE82

tonger2003

darkradx

Virus or unwanted program 'HEUR/Malware [HEUR/Malware]'
detected in file 'C:\Documents and Settings\Joseph Wan\Desktop\样本\patch.exe.
Action performed: Allow access

2007-6-8 15:37:02        Joseph Wan        1596        Sign of "Win32:OnLineGames-BX [Trj]" has been found in "C:\Documents and Settings\Joseph Wan\Desktop\样本\patch.exe\[PECompact]" file.

aerbeisi

Scan taken on 08 Jun 2007 07:28:22 (GMT)
A-Squared	Found nothing
AntiVir	Found HEUR/Malware
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
Dr.Web	Found BackDoor.Pigeon.1604
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found BackDoor.Pigeon.1604

1688388728

62CE82

promised

?           Copyright (c) 1993-2007 by VBA Ltd.            ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\样本.rar:<RAR>\patch.exe : infected BackDoor.Pigeon.1604
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 1       - total       : 11
- scanned         : 1       -  scanned    : 1       - scanned     : 11
- contain viruses : 1       -  infected   : 1       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 0

Startup    : 15:39:48 08-06-2007
End        : 15:39:52 08-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

darkradx

三楼从哪里查的? avast found nothing啊

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
    [0] Archive type: RAR
    --> patch.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

欠妳緈諨

原帖由 darkradx 于 2007-6-8 15:40 发表
三楼从哪里查的? avast found nothing啊

AVAST可杀

su-tt

Start of the scan: 2007年6月8日  18:06

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> patch.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年6月8日  18:06
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      1 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

kp2006

原帖由 欠你幸福 于 2007-6-8 18:00 发表

AVAST可杀

原帖由 1688388728 于 2007-6-8 15:38 发表
62CE82

报不一样