几个未知样本

显示全部楼层 · 发表于 2007-8-30 00:05:19

Begin scan in 'C:\Documents and Settings\dell\桌面\样本.rar'
C:\Documents and Settings\dell\桌面\样本.rar
  [0] Archive type: RAR
  --> mir.exe
   [DETECTION] Is the Trojan horse TR/PSW.Mir.AB
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-30 00:29:53

大蜘蛛
[扫描路径] C:\Documents and Settings\Administrator\桌面\样本.rar
>C:\Documents and Settings\Administrator\桌面\样本.rar\dismanager.exe - 确定
>>C:\Documents and Settings\Administrator\桌面\样本.rar\mir.exe 已被感染了 : Trojan.PWS.Wsgame.1173
>>C:\Documents and Settings\Administrator\桌面\样本.rar\waterframe.exe - 确定
C:\Documents and Settings\Administrator\桌面\样本.rar - 发现档案文件中有受感染的对象
C:\Documents and Settings\Administrator\桌面\样本.rar:Zone.Identifier - 确定

显示全部楼层 · 发表于 2007-8-30 00:41:21

显示全部楼层 · 发表于 2007-8-30 07:39:13

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> mir.exe
   [DETECTION] Is the Trojan horse TR/PSW.Mir.AB
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-30 10:37:39

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MIR.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVGJMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVGJMON.DAT
是否删除木马程序及其衍生物?

还有2个缺少DLL，无法运行

显示全部楼层 · 发表于 2007-8-30 12:42:56

红伞报。
Found a virus or unwanted program 'TR/Delphi.Downloader.Gen' [trojan]
in file 'C:\BOOT\setup5.rar'.
Action taken:
The file was moved to "474a4aca.qua"!

显示全部楼层 · 发表于 2007-8-30 12:44:01

红伞报

显示全部楼层 · 发表于 2007-8-31 18:08:11

Trojan.Win32.Pakes.ch

[病毒样本] 几个未知样本

本帖子中包含更多资源