病毒

显示全部楼层 · 发表于 2007-10-4 14:25:38

哈.....
同学照相机里的
饿.....
照片被.........KILL了!!

显示全部楼层 · 发表于 2007-10-4 14:26:28

2007-10-4 14:26:20 1191479180 Administrator 300 Sign of "VBS:Malware [Script]" has been found in "C:\Documents and Settings\Administrator\桌面\桌面.rar\comment.htt" file.
2007-10-4 14:26:23 1191479183 Administrator 300 Sign of "Win32:Small-EVF [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\桌面.rar\setup.exe\[FSG]" file.
2007-10-4 14:26:23 1191479183 Administrator 300 Sign of "Win32:Agent-GBZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\桌面.rar\sunny.exe\[FSG]" file.
2007-10-4 14:26:23 1191479183 Administrator 300 Sign of "Win32:Wukill-B [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\桌面.rar\101MSDCF.exe" file.

显示全部楼层 · 发表于 2007-10-4 14:32:37

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Exploit.ActiveXComponent.a
病毒： Win32.Iuhzu.c
病毒： Trojan.DL.Agent.gkn
病毒： Worm.Wukill.a

用户来源：互联网

软件版本：20.12.30

显示全部楼层 · 发表于 2007-10-4 14:33:25

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\��.rar'
C:\Users\morgan\Documents\
  ��.rar
[0] Archive type: RAR
--> AutoRun.inf
--> comment.htt
      [DETECTION] Contains detection pattern of the VBS script virus VBS/Starter.B
      [WARNING] Infected files in archives cannot be repaired!
--> desktop.ini
--> setup.exe
      [DETECTION] Contains detection pattern of the worm WORM/Small.R.52
      [WARNING] Infected files in archives cannot be repaired!
--> sunny.exe
      [DETECTION] Is the Trojan horse TR/Agent.2457
      [WARNING] Infected files in archives cannot be repaired!
--> 101MSDCF.exe
      [DETECTION] Contains detection pattern of the worm WORM/Rays
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

End of the scan: 2007年10月3日  23:33
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   4 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-4 14:48:18

检测到：木马程序 Trojan.VBS.Starter.a URL: http://bbs.kafan.cn/attachment.php?aid=135169//comment.htt

显示全部楼层 · 发表于 2007-10-4 14:51:39

扫描进行于：2007-10-4 14:51:27
扫描日志
NOD32版本 2570 (20071003) NT
命令行： F:\Documents and Settings\kafan\桌面\桌面.rar

日期： 4.10.2007 时间：14:51:29
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\kafan\桌面\桌面.rar
F:\Documents and Settings\kafan\桌面\桌面.rar >>RAR >>comment.htt - VBS/Starter.A 木马
F:\Documents and Settings\kafan\桌面\桌面.rar >>RAR >>setup.exe - Win32/Agent.AMB 木马的变种
F:\Documents and Settings\kafan\桌面\桌面.rar >>RAR >>sunny.exe - 未查明的 NewHeur_PE 病毒 [7]
F:\Documents and Settings\kafan\桌面\桌面.rar >>RAR >>101MSDCF.exe - Win32/Wukill.B 蠕虫
已扫描的文件数目：6
已发现的病毒数目：4
完成时间： 14:51:29 总扫描时间：0 秒 (00:00:00)

注意：
[7] 该文件可能感染上未知病毒。

显示全部楼层 · 发表于 2007-10-4 17:17:47

卡巴斯基反病毒软件 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=135169 is infected with Trojan.VBS.Starter.a virus

显示全部楼层 · 发表于 2007-10-4 19:12:40

2007-10-4 18:10:56 已删除 CN-89FF4B9EA4D6\Administrator E:\Program Files\WinRAR\WinRAR.exe E:\Documents and Settings\Administrator\桌面\MM穿墙木马\comment.htt JS/Exploit-ActXComp (特洛伊)
2007-10-4 18:10:57 已删除 CN-89FF4B9EA4D6\Administrator E:\Program Files\WinRAR\WinRAR.exe E:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MM穿墙木马\SETUP.EXE Generic.dx (特洛伊)
2007-10-4 18:10:57 已删除 CN-89FF4B9EA4D6\Administrator E:\Program Files\WinRAR\WinRAR.exe E:\Documents and Settings\Administrator\桌面\MM穿墙木马\setup.exe Generic.dx (特洛伊)
2007-10-4 18:10:57 已删除 CN-89FF4B9EA4D6\Administrator E:\Program Files\WinRAR\WinRAR.exe E:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MM穿墙木马\SUNNY.EXE W32/USBAgent (病毒)
2007-10-4 18:10:57 已删除 CN-89FF4B9EA4D6\Administrator E:\Program Files\WinRAR\WinRAR.exe E:\Documents and Settings\Administrator\桌面\MM穿墙木马\sunny.exe W32/USBAgent (病毒)
2007-10-4 18:10:57 已删除 CN-89FF4B9EA4D6\Administrator E:\Program Files\WinRAR\WinRAR.exe E:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MM穿墙木马\101MSDCF.EXE W32/Wukill.worm.gen (病毒)
2007-10-4 18:10:57 已删除 CN-89FF4B9EA4D6\Administrator E:\Program Files\WinRAR\WinRAR.exe E:\Documents and Settings\Administrator\桌面\MM穿墙木马\101MSDCF.exe W32/Wukill.worm.gen (病毒)

显示全部楼层 · 发表于 2007-10-4 19:16:45

蠕虫名称:Worm.Win32.Agent.bsv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SETUP.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Small.kml

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SUNNY.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Email-Worm.Win32.Rays.i

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\101MSDCF.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-10-4 19:27:47

卡巴

已删除: 木马程序 Trojan.VBS.Starter.a 文件: F:\病毒样本\桌面.rar/comment.htt
已删除: 木马程序 Trojan-Downloader.Win32.Small.efu 文件: F:\病毒样本\桌面.rar/sunny.exe
已删除: 病毒 Worm.Win32.Small.r 文件: F:\病毒样本\桌面.rar/setup.exe//FSG
已删除: 病毒 Email-Worm.Win32.Rays 文件: F:\病毒样本\桌面.rar/101MSDCF.exe

[病毒样本] 病毒

本帖子中包含更多资源