12
返回列表 发新帖
楼主: qianwenxiang
收起左侧

[病毒样本] [MD5: 9C2AE4 7FE81F A30D00 1AFA59 41F20F 65FFBB]

[复制链接]
蓝色牛仔裤
发表于 2007-7-9 16:25:39 | 显示全部楼层
差一个FlashRun.dll

[Scan path] C:\Documents and Settings\Administrator\桌面\样本(2)
>C:\Documents and Settings\Administrator\桌面\样本(2)\windows.exe infected with Win32.HLLW.Autoruner.205
>>C:\Documents and Settings\Administrator\桌面\样本(2)\Yayad4HaoFang070112.exe\data001 - Ok
>C:\Documents and Settings\Administrator\桌面\样本(2)\Yayad4HaoFang070112.exe\data002 is an adware program Adware.Yayad
>C:\Documents and Settings\Administrator\桌面\样本(2)\Yayad4HaoFang070112.exe\data003 - Ok
>C:\Documents and Settings\Administrator\桌面\样本(2)\Yayad4HaoFang070112.exe\data004 is an adware program Adware.Yayad
>C:\Documents and Settings\Administrator\桌面\样本(2)\Yayad4HaoFang070112.exe\data005 is an adware program Adware.Yayad
>C:\Documents and Settings\Administrator\桌面\样本(2)\Yayad4HaoFang070112.exe\data006 is an adware program Adware.Yayad
C:\Documents and Settings\Administrator\桌面\样本(2)\Yayad4HaoFang070112.exe - archive contains infected objects

[Scan path] C:\Documents and Settings\Administrator\桌面\样本(4)
>C:\Documents and Settings\Administrator\桌面\样本(4)\0013.exe infected with Trojan.Click.2247
C:\Documents and Settings\Administrator\桌面\样本(4)\doit.exe infected with Trojan.PWS.Maran.262
C:\Documents and Settings\Administrator\桌面\样本(4)\FlashRun.dll - Ok
C:\Documents and Settings\Administrator\桌面\样本(4)\gzs.exe infected with Trojan.PWS.Poptang

[ 本帖最后由 蓝色牛仔裤 于 2007-7-9 16:27 编辑 ]
uhthn2002
发表于 2007-7-9 16:34:52 | 显示全部楼层
C:\Documents and Settings\uhthn\Desktop\4.rar:<RAR>\Yayad4HaoFang070112.exe : infected AdWare.Win32.Yayadu.b
C:\Documents and Settings\uhthn\Desktop\4.rar:<RAR>\windows.exe : infected Win32.HLLW.Autoruner.205
C:\Documents and Settings\uhthn\Desktop\5.rar:<RAR>\gzs.exe : infected Trojan.PWS.Poptang
C:\Documents and Settings\uhthn\Desktop\5.rar:<RAR>\0013.exe : is suspected of Embedded.Trojan.Click.2247
C:\Documents and Settings\uhthn\Desktop\5.rar:<RAR>\doit.exe : infected MalwareScope.Trojan-PSW.Game.19


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 6       - total       : 2     
- scanned         : 2       -  scanned    : 6       - scanned     : 2     
- contain viruses : 2       -  infected   : 4       - infected    : 2     
- deleted         : 0       -  suspicious : 1       - suspicious  : 0
woai_jolin
发表于 2007-7-9 17:08:10 | 显示全部楼层
时间        模块        对象        名称        病毒        操作        用户名称        信息
2007/7/9 16:56:19        AMON        文件        D:\病毒上报\doit.exe        Win32/TrojanDownloader.Delf.NSA 木马的变种        已隔离 - 已删除        Jason-PC\Jason        程序新建文件时发生事件: C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007/7/9 16:56:16        AMON        文件        D:\病毒上报\gzs.exe        Win32/Pacex.Gen 病毒        已隔离 - 已删除        Jason-PC\Jason        程序新建文件时发生事件: C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007/7/9 16:55:59        AMON        文件        D:\病毒上报\windows.exe        未查明的 NewHeur_PE 病毒        已隔离 - 已删除        Jason-PC\Jason        程序新建文件时发生事件: C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
taihuxian
发表于 2007-7-9 18:07:13 | 显示全部楼层
BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
Generic.Malware.SBdldsp.217716FD
Adware.Yayadu.Q
GenPack:Generic.Malware.WBdld.BDFDEE6C
Trojan.Clicker.BHO.P
Trojan.Agent.EYV
promised
发表于 2007-7-9 19:26:31 | 显示全部楼层
ikarus分析师认为FLASHRUN无毒
wangjay1980
发表于 2007-7-9 21:49:10 | 显示全部楼层
Hello,

FlashRun.dlld - not-a-virus:AdWare.Win32.Agent.ao

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

windows.exed - Virus.Win32.AutoRun.em

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
wangjay1980
发表于 2007-7-9 21:49:44 | 显示全部楼层

回复 #15 promised 的帖子

确实不是毒
XinDOS
发表于 2007-7-9 22:15:07 | 显示全部楼层
KIS6杀了
yashoo
头像被屏蔽
发表于 2007-7-9 23:03:21 | 显示全部楼层
3个。。

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-6 11:35 , Processed in 0.095085 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表