查看: 8853|回复: 30
收起左侧

[病毒样本] [MD5:1C25ED] AV终结者病毒

[复制链接]
yksoar
发表于 2007-6-14 09:13:48 | 显示全部楼层 |阅读模式
AV终结者病毒

[ 本帖最后由 yksoar 于 2007-6-14 10:09 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wangjay1980
发表于 2007-6-14 09:18:52 | 显示全部楼层
detected: Trojan program Trojan-PSW.Win32.Nilage.bcw        URL: http://bbs.kafan.cn/attachment.php?aid=87108//818BE708.exe//UPX
detected: Trojan program Trojan-PSW.Win32.Nilage.bcw        URL: http://bbs.kafan.cn/attachment.php?aid=87109//81E6C75A.chm//UPX
lanvin
发表于 2007-6-14 09:32:26 | 显示全部楼层
哥们
按照版规修改小标题
The EQs
发表于 2007-6-14 09:39:50 | 显示全部楼层
Scan performed at: 2007-6-14 9:42:32
Scanning Log
NOD32 version 2328 (20070613) NT
Command line: C:\Documents and Settings\EQ2\桌面\生成物.rar C:\Documents and Settings\EQ2\桌面\AV终结者-样本.rar
Operating memory - is OK

Date: 14.6.2007  Time: 09:42:37
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\生成物.rar; C:\Documents and Settings\EQ2\桌面\AV终结者-样本.rar
C:\Documents and Settings\EQ2\桌面\生成物.rar ?RAR ?81E6C75A.chm - Win32/Delf.CC worm - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\生成物.rar ?RAR ?81E6C75A.dat - Win32/Delf.CC worm - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\生成物.rar ?RAR ?81E6C75A.dll - archive damaged
C:\Documents and Settings\EQ2\桌面\AV终结者-样本.rar ?RAR ?818BE708.exe - Win32/Delf.CC worm - was a part of the deleted object
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 2
Time of completion: 09:42:37 Total scanning time: 0 sec (00:00:00)
wqihai
头像被屏蔽
发表于 2007-6-14 09:58:37 | 显示全部楼层
都给咔吧干掉了
欠妳緈諨
发表于 2007-6-14 10:04:55 | 显示全部楼层
AVAST飘
yksoar
 楼主| 发表于 2007-6-14 10:10:19 | 显示全部楼层

回复 #3 lanvin 的帖子

忘了```已经修改`
mofunzone
发表于 2007-6-14 10:12:23 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\生成物.rar'
C:\Documents and Settings\Administrator\My Documents\
  生成物.rar
    [0] Archive type: RAR
    --> 81E6C75A.chm
        [DETECTION] Is the Trojan horse TR/PSW.Nilage.bcw.21
        [WARNING]   Infected files in archives cannot be repaired!
    --> 81E6C75A.dat
        [DETECTION] Is the Trojan horse TR/PSW.Nilage.bcw.21
        [WARNING]   Infected files in archives cannot be repaired!
    --> 81E6C75A.dll
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\AV终结者-样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  AV终结者-样本.rar
    [0] Archive type: RAR
    --> 818BE708.exe
        [DETECTION] Is the Trojan horse TR/PSW.Nilage.bcw.21
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Nblock
发表于 2007-6-14 10:13:45 | 显示全部楼层
修改文件执行映射 以启动有害程序  就这么简单杀毒软件还是没戏玩完    垃圾熊猫也比这个帅
豆腐做的猩猩该怎么活下去啊

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
蓝色牛仔裤
发表于 2007-6-14 10:20:09 | 显示全部楼层
[Scan path] C:\Documents and Settings\Administrator\桌面\AV终结者-样本.rar
>>>C:\Documents and Settings\Administrator\桌面\AV终结者-样本.rar\818BE708.exe infected with Trojan.DownLoader.23734
C:\Documents and Settings\Administrator\桌面\AV终结者-样本.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 33 Kb/s
Scan time: 00:00:00
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-4-23 15:57 , Processed in 0.150809 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表