7e6a0a d77529 两个

显示全部楼层 · 发表于 2007-6-19 23:47:04

detected: virus Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\2.rar/svchost.exe//PE_Patch.PseudoSign//PE_Patch.MaskPE//PE_Patch.MaskPE

显示全部楼层 · 发表于 2007-6-19 23:47:42

Scan performed at: 2007-6-19 23:50:47
Scanning Log
NOD32 version 2338 (20070619) NT
Command line: C:\Documents and Settings\EQ2\桌面\2.rar
Operating memory - is OK

Date: 19.6.2007 Time: 23:50:52
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\2.rar
C:\Documents and Settings\EQ2\桌面\2.rar ?RAR ?123[1].exe - probably a variant of Win32/PSW.QQPass.VD trojan
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 23:50:52 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-6-19 23:53:39

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\2.rar'
C:\Documents and Settings\Administrator\桌面\2.rar
  [0] Archive type: RAR
  --> svchost.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> 123[1].exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '46e9fd30.qua'!

显示全部楼层 · 发表于 2007-6-19 23:54:46

为什么卡巴和NOD总是启发不一样的，很有意思

显示全部楼层 · 发表于 2007-6-19 23:55:03

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-6
Start time: 2007-6-19 23:58
Engine(s): KAV engine (AVK 17.5733), BD-Engine (BD 17.5315)
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: 123[1].exe
Path: C:\Documents and Settings\Administrator\桌面\2
Status: Move file into quarantine
Virus: Generic.PWStealer.B98873EF (BD-Engine)
Object: svchost.exe
Path: C:\Documents and Settings\Administrator\桌面\2
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Analysis complete: 2007-6-19 23:58
2 files checked
2 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-6-19 23:55:11

卡6飘过上报.......

显示全部楼层 · 发表于 2007-6-19 23:55:30

嫉妒BD BT的行为启发。。。。。。

显示全部楼层 · 发表于 2007-6-19 23:58:22

原帖由 wangjay1980 于 2007-6-19 23:54 发表
为什么卡巴和NOD总是启发不一样的，很有意思

nod32和卡吧怎么会一样呢

瑞星不报

安铁诺2008报Trojan-PSW.Win32.QQRob.eo
Trojan.PSW.QQPass.rmh

[ 本帖最后由 kp2006 于 2007-6-20 00:04 编辑 ]

显示全部楼层 · 发表于 2007-6-20 00:04:27

我的意思是，NOD启发的恰恰是KAV不报的，KAV启发的，NOD又不启发

[病毒样本] 7e6a0a d77529 两个

本帖子中包含更多资源

回复 #3 EQ2 的帖子

卡6还查不出

回复 #9 kp2006 的帖子

浏览过的版块