查看: 2827|回复: 15
收起左侧

[病毒样本] 57ced4,e99ff0,e7a82b,021b4a.4个!

[复制链接]
欠妳緈諨
发表于 2007-9-15 17:19:24 | 显示全部楼层 |阅读模式

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
红心王子
发表于 2007-9-15 17:24:12 | 显示全部楼层
小a 报2个

2007-9-15        17:23:55        1189848235        Administrator        3408        Sign of "Win32:Agent-KCT [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\4个.rar\393.exe\[Upack]\[Embedded#4d08]\[Upack]" file.  
2007-9-15        17:23:57        1189848237        Administrator        3408        Sign of "Win32:Obfuscated-BQI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\4个.rar\msntsrv2.exe" file.
aziok
发表于 2007-9-15 17:24:30 | 显示全部楼层
tarting the file scan:

Begin scan in 桌面\4个.rar
  [0] Archive type: RAR
  --> 111.exe
      [DETECTION] Is the Trojan horse TR/Drop.Rootkit.Agent.CO.8
  --> 393.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> msntsrv2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> msntsrv.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
残缺的唯美
发表于 2007-9-15 17:28:40 | 显示全部楼层
Scan performed at: 2007-9-15 17:27:42
Scanning Log
NOD32 version 2531 (20070915) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\4个.rar

Date: 15.9.2007  Time: 17:27:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\4个.rar
D:\Documents and Settings\EKINCHENG\桌面\4个.rar ?RAR ?111.exe - Win32/TrojanDownloader.Agent.DEU trojan - was a part of the deleted object
D:\Documents and Settings\EKINCHENG\桌面\4个.rar ?RAR ?393.exe - Win32/Agent.NGQ trojan - was a part of the deleted object
Number of scanned files: 5
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 17:28:03 Total scanning time: 20 sec (00:00:20)
saga3721
发表于 2007-9-15 18:37:41 | 显示全部楼层
卡巴怎么才报了3个?
tracydk
发表于 2007-9-15 19:17:28 | 显示全部楼层
2

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
uhthn2002
发表于 2007-9-15 19:18:15 | 显示全部楼层

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4980
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\111.exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\393.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\msntsrv2.exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\msntsrv.exe - Suspicious file

4 Files scanned
0 Infected files found
3 Suspicious files found
0 Files cured
0 Files deleted
woai_jolin
发表于 2007-9-16 09:43:52 | 显示全部楼层
扫描报告
2007年9月16日 9:43:47 - 9:43:47
计算机名称: C3EF58622174424
扫描类型: 扫描目标
目标: G:\v\4个.rar


--------------------------------------------------------------------------------

结果: 找到 3 恶意软件
Trojan-Downloader.Win32.Agent.djt (病毒)
G:\v\4个.rar\111.exe
Backdoor.Win32.Agobot.akd (病毒)
G:\v\4个.rar\393.exe
Packed.Win32.PolyCrypt.d (病毒)
G:\v\4个.rar\msntsrv.exe




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 5
未扫描: 0
结果:
病毒: 3
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0


--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2007-09-15_01
间谍软件: 2007-09-15_01
扫描引擎:
F-Secure AVP: 7.00.171, 2007-09-15
F-Secure Libra: 2.04.01, 2007-09-14
F-Secure Orion: 1.02.37, 2007-09-15
F-Secure Draco: 1.00.35, 2007-09-03
扫描选项:
扫描定义的文件: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问
Killer_cg
发表于 2007-9-16 09:55:37 | 显示全部楼层
红伞扫出4个
dolphin
发表于 2007-9-16 10:00:11 | 显示全部楼层
瑞星1个
Backdoor.Win32.Agobot.akd    4个.rar>>393.exe
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-17 13:53 , Processed in 0.136174 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表