10 trojan

显示全部楼层 · 发表于 2008-4-22 18:16:19

avast : 3x rootkit-gen

显示全部楼层 · 发表于 2008-4-22 18:17:59

Begin scan in 'C:\Documents and Settings\haha\桌面\pckr1.rar'
C:\Documents and Settings\haha\桌面\pckr1.rar
  [0] Archive type: RAR
  --> mc2294.exe
   [DETECTION] Contains detection pattern of the dial-up program DIAL/Generic
  --> mc2295.exe
   [DETECTION] Contains detection pattern of the dial-up program DIAL/Generic
  --> mc2296.exe
   [DETECTION] Contains detection pattern of the dial-up program DIAL/Generic
  --> loader.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.evn.1
  --> mc001.exe
   [DETECTION] Is the Trojan horse TR/Agent.33520.5
  --> mc002.exe
   [DETECTION] Contains detection pattern of the dial-up program DIAL/Generic
  --> mc2292.exe
   [DETECTION] Is the Trojan horse TR/StartPage.azj.1
  --> mc2293.exe
   [DETECTION] Is the Trojan horse TR/StartPage.azj.2
   [NOTE]    A backup was created as '4878bba2.qua'  ( QUARANTINE )

End of the scan: 2008年4月22日  18:17
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   11 Files were scanned
   8 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings

显示全部楼层 · 发表于 2008-4-22 18:19:50

2008-4-22 18:18:15 SYSTEM 1224 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "http://bbs.kafan.cn/attachment.php?aid=247339\mc001.exe" file.

显示全部楼层 · 发表于 2008-4-22 18:30:31

kv 1

显示全部楼层 · 发表于 2008-4-22 18:33:20

SEP报了6个，全部为Downloader.Goobiz

显示全部楼层 · 发表于 2008-4-22 18:37:05

EAV
D:\病毒样本\pckr1.rar > RAR > mc2294.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种
D:\病毒样本\pckr1.rar > RAR > mc2295.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种
D:\病毒样本\pckr1.rar > RAR > mc2296.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种
D:\病毒样本\pckr1.rar > RAR > mc2300.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种
D:\病毒样本\pckr1.rar > RAR > mc001.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种
D:\病毒样本\pckr1.rar > RAR > mc002.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种
D:\病毒样本\pckr1.rar > RAR > mc2292.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种
D:\病毒样本\pckr1.rar > RAR > mc2293.exe - Win32/TrojanClicker.Agent.NBI 特洛伊木马的变种

显示全部楼层 · 发表于 2008-4-22 18:40:12

这是小红伞杀的

显示全部楼层 · 发表于 2008-4-22 19:07:22

TO KL

Hello,

2008-4-22__8256E.exe_ - Trojan-PSW.Win32.OnLineGames.absj,
install_766_MHw0fHx8fHx8fA_.exe_ - Trojan-Downloader.Win32.FraudLoad.qf,
jb.exe_ - Trojan.Win32.StartPage.bbm,
ldr.exe_ - Trojan-Spy.Win32.Zbot.bfi,
mc002.exe_ - Trojan-Clicker.Win32.Agent.abu,
mc2300.exe_ - Trojan.Win32.Agent.kqh

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

fun1.exe_, mc001.exe_

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 wangjay1980 于 2008-4-22 22:24 编辑 ]

显示全部楼层 · 发表于 2008-4-22 20:54:37

rising20.41.12未杀！

显示全部楼层 · 发表于 2008-4-22 21:26:40

金山 0

[病毒样本] 10 trojan

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

20/0