查看: 2803|回复: 11
收起左侧

[病毒样本] 2个fe94d1 973535

[复制链接]
欠妳緈諨
发表于 2007-8-24 11:08:09 | 显示全部楼层 |阅读模式

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
taihuxian
发表于 2007-8-24 11:09:33 | 显示全部楼层
Result: 2 malware found
AdWare.Win32.Cinmus.ai (adware)
C:\Documents and Settings\Administrator\×ÀÃæ\2.rar\2.exe
AdWare.Win32.Cinmus.g (adware)
C:\Documents and Settings\Administrator\×ÀÃæ\2.rar\1.exe
The EQs
发表于 2007-8-24 11:10:36 | 显示全部楼层
Scan performed at: 2007-8-24 11:10:10
Scanning Log
NOD32 version 2481 (20070823) NT
Command line: C:\Documents and Settings\Don johnson\桌面\2.rar
Operating memory - is OK

Date: 24.8.2007  Time: 11:10:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\2.rar
C:\Documents and Settings\Don johnson\桌面\2.rar ?RAR ?2.exe ?NSIS ?acpidisk.sys - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\2.rar ?RAR ?1.exe ?NSIS ?acpidisk.sys - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
Number of scanned files: 7
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 11:10:15 Total scanning time: 1 sec (00:00:01)
微点卫士
发表于 2007-8-24 11:11:08 | 显示全部楼层
微点:
广告软件名称:AdWare.Win32.Cinmus.ata

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1.EXE
是广告软件!
已成功阻止其运行,是否要删除此文件?
广告软件名称:AdWare.Win32.Agent.bfc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\DOSSSETUP.DLL
是广告软件!
已成功阻止其运行,是否要删除此文件?
广告软件名称:AdWare.Win32.Cinmus.apv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\ACPIDISK.SYS
是广告软件!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\NSEB.TMP\SYSTEM.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\DOSSSETUP.DLL
是否删除木马程序及其衍生物?
woai_jolin
发表于 2007-8-24 11:12:54 | 显示全部楼层
2007-8-24 11:12:46        Scanning Log
2007-8-24 11:12:46        Version of virus signature database: 2481 (20070823)
2007-8-24 11:12:46        Date: 24.8.2007  Time: 11:12:45
2007-8-24 11:12:46        Scanned disks, folders and files: F:\v\2.rar
2007-8-24 11:12:52        F:\v\2.rar » RAR » 2.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
2007-8-24 11:12:52        F:\v\2.rar » RAR » 1.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
2007-8-24 11:12:52        Number of scanned files: 9
2007-8-24 11:12:52        Number of threats found: 2
2007-8-24 11:12:52        Time of completion: 11:12:52  Total scanning time: 7 sec (00:00:07)
wangjay1980
发表于 2007-8-24 11:42:01 | 显示全部楼层
detected: adware not-a-virus:AdWare.Win32.Cinmus.ai        URL: http://bbs.kafan.cn/attachment.php?aid=118213//2.exe//data0003
detected: adware not-a-virus:AdWare.Win32.Cinmus.ai        URL: http://bbs.kafan.cn/attachment.php?aid=118213//2.exe//data0004
detected: adware not-a-virus:AdWare.Win32.Cinmus.g        URL: http://bbs.kafan.cn/attachment.php?aid=118213//1.exe//data0003
detected: adware not-a-virus:AdWare.Win32.Cinmus.j        URL: http://bbs.kafan.cn/attachment.php?aid=118213//1.exe//data0004
残缺的唯美
发表于 2007-8-24 11:53:24 | 显示全部楼层
2007-8-24 11:52:49        Scanning Log
2007-8-24 11:52:49        Version of virus signature database: 2481 (20070823)
2007-8-24 11:52:49        Date: 24.8.2007  Time: 11:52:49
2007-8-24 11:52:49        Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\2.rar
2007-8-24 11:52:52        D:\Documents and Settings\EKINCHENG\桌面\2.rar » RAR » 2.exe » NSIS » System.dll - is OK
2007-8-24 11:52:52        D:\Documents and Settings\EKINCHENG\桌面\2.rar » RAR » 2.exe » NSIS » DoSSSetup.dll - is OK
2007-8-24 11:52:52        D:\Documents and Settings\EKINCHENG\桌面\2.rar » RAR » 2.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
2007-8-24 11:52:52        D:\Documents and Settings\EKINCHENG\桌面\2.rar » RAR » 1.exe » NSIS » System.dll - is OK
2007-8-24 11:52:52        D:\Documents and Settings\EKINCHENG\桌面\2.rar » RAR » 1.exe » NSIS » DoSSSetup.dll - is OK
2007-8-24 11:52:52        D:\Documents and Settings\EKINCHENG\桌面\2.rar » RAR » 1.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
2007-8-24 11:52:52        Number of scanned files: 9
2007-8-24 11:52:52        Number of threats found: 2
2007-8-24 11:52:52        Time of completion: 11:52:52  Total scanning time: 3 sec (00:00:03)
ess和Nod32报的查到文件数目不一样=。=
风野胤
发表于 2007-8-24 11:56:22 | 显示全部楼层

回复 #7 za1012 的帖子

这不是什么大问题
有的时候nod扫是把压缩包也带进去算一个文件的
碧水寒潭
发表于 2007-8-24 11:58:45 | 显示全部楼层
Start of the scan: 2007年8月24日  11:58

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\2.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Contains signature of the dropper DR/Cinmus.AI.1
  --> 1.exe
      [DETECTION] Contains signature of the dropper DR/Cinmus.G.207
      [INFO]      The file was deleted!


End of the scan: 2007年8月24日  11:58
Used time: 00:18 min
yashoo
头像被屏蔽
发表于 2007-8-24 12:35:56 | 显示全部楼层
已删除: 广告程序 not-a-virus:AdWare.Win32.Cinmus.ai        文件: E:\test\2.rar/2.exe//data0003
已删除: 广告程序 not-a-virus:AdWare.Win32.Cinmus.ai        文件: E:\test\2.rar/2.exe//data0004
已删除: 广告程序 not-a-virus:AdWare.Win32.Cinmus.g        文件: E:\test\2.rar/1.exe//data0003
已删除: 广告程序 not-a-virus:AdWare.Win32.Cinmus.j        文件: E:\test\2.rar/1.exe//data0004
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-10-20 18:18 , Processed in 0.085765 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表