【ab1f81】样本重复，请番茄del

显示全部楼层 · 发表于 2007-6-8 16:37:08

[ 本帖最后由 jlennon 于 2007-6-8 16:48 编辑 ]

显示全部楼层 · 发表于 2007-6-8 16:38:25

Scan performed at: 2007-6-8 16:40:02
Scanning Log
NOD32 version 2317 (20070607) NT
Command line: C:\Documents and Settings\EQ2\桌面\wgso.zip
Operating memory - is OK

Date: 8.6.2007 Time: 16:40:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wgso.zip
C:\Documents and Settings\EQ2\桌面\wgso.zip ?ZIP ?wgso.exe - Win32/Pacex.Gen virus
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:40:06 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-6-8 16:39:40

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=84167 is infected with Trojan-PSW.Win32.OnLineGames.ox virus

显示全部楼层 · 发表于 2007-6-8 16:39:57

x点又杀了

显示全部楼层 · 发表于 2007-6-8 16:40:36

LS的企鹅签名真是可爱

显示全部楼层 · 发表于 2007-6-8 16:40:48

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.3
Virus signature file from: 2007-6-7, 20:26

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\wgso.zip

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-6-8, 16:41:47
---------------------------------------------------------------------

[Found virus] <W32/PWStealer2!Generic (not disinfectable)> C:\Documents and Settings\Administrator\桌面\wgso.zip->wgso.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\wgso.zip
[Quarantined] C:\Documents and Settings\Administrator\桌面\wgso.zip->wgso.exe

---------------------------------------------------------------------
Scan ended: 2007-6-8, 16:41:49
Duration: 0:00:02

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-6-8 16:41:52

http://bbs.kafan.cn/viewthread.php?tid=94502&extra=page%3D1

同个样本

显示全部楼层 · 发表于 2007-6-8 16:41:52

抱歉。。。。。
样本是重复的
只不过某人扫了压缩包的MD5值

http://bbs.kafan.cn/viewthread.php?tid=94502&page=1#pid1165404
彻底无语
看来还是CRC32好

显示全部楼层 · 发表于 2007-6-8 16:42:15

X点的黑炸弹问题应该早已搞定了吧？

显示全部楼层 · 发表于 2007-6-8 16:44:59

原帖由 jlennon 于 2007-6-8 16:42 发表
X点的黑炸弹问题应该早已搞定了吧？

哇塞你怎么知道我的微点版本和别人不一样本地的txt文档被黑炸弹感染了其他人我看了下提示修改exe貌似可以阻止

企鹅可爱吧。。

[ 本帖最后由 Nblock 于 2007-6-8 16:46 编辑 ]

[病毒样本] 【ab1f81】样本重复，请番茄del

本帖子中包含更多资源

本帖子中包含更多资源

回复 #4 Nblock 的帖子