费尔全死病毒样本 第二包 26只

jordanpchome

解壓密碼:virus
http://www.sendspace.com/file/lp3unx

1p1

无法显示网页
您正在查找的页当前不可用。 网站可能遇到支持问题，或者您需要 调整您的浏览器设置。

qianwenxiang

lz的第二包：

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\2\0650.exe]
                    …………发现Spy！报告:[1]
文件信息:  大小:15488  MD5:ec37fcbd88e11fa1323f38c494f2829a


[C:\Documents and Settings\Administrator\桌面\Virus\2\0674.exe]
                    …………发现Spy！报告:[2]
文件信息:  大小:71582  MD5:3a1d8d8d491a3c04015a50da29373683


[C:\Documents and Settings\Administrator\桌面\Virus\2\0677.exe]
                    …………发现Spy！报告:[2] [1]
文件信息:  大小:73292  MD5:e920dbbe5d2bae9a778f040218a2b49b


[C:\Documents and Settings\Administrator\桌面\Virus\2\0658.dll]
                    …………发现Spy！报告:[2]
文件信息:  大小:166912  MD5:31727051d9d8f48f2298785e93350738


文件数:5   病毒数:4  比重:0.8
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

king6808

已删除：恶意程序 Exploit.HTML.Smil.j        文件　: G:\2.rar/0655.smi
已删除：木马程序 Trojan-Spy.Win32.Delf.uc        文件　: G:\2.rar/0677.exe//PE_Patch//UPack
已删除：木马程序 Trojan.VBS.Runner.v        文件　: G:\2.rar/0710.vbs

IllusionWing

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.2.8
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\2\0589.DLL 检测到 Backdoor.Unknown.SettingFile
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\2\0650.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\2\0677.exe 检测到 Packed.Generic.Modified
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\2\0702.DLL 检测到 Backdoor.Unknown.SettingFile
检测到了 4 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:02:0094，共扫描的文件数量：29，共扫描到的威胁数量：4，威胁率：0.13793103

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\2'
C:\Users\morgan\Documents\2\
  0589.DLL
  0600.diz
  0609.jpg
  0614.js
  0633.htm
  0634.nfo
  0649.nfo
  0650.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
      [INFO]      The file was deleted!
  0652
  0653.sys
  0655.smi
      [DETECTION] Contains detection pattern of the exploits EXP/HTML.BM.A
      [INFO]      The file was deleted!
  0658.dll
  0661.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '473afea4.qua'!
  0669.jpg
  0674.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.71582
      [INFO]      The file was deleted!
  0677.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UC.636
      [INFO]      The file was deleted!
  0686.tmp
  0690.ocx
  0694.ocx
  0695.tmp
  0702.DLL
  0710.vbs
      [DETECTION] Is the Trojan horse TR/Runner.V
      [INFO]      The file was deleted!
  0714.jpg
  0720.com
  0724.log
  0728.nfo


End of the scan: 2007年10月4日  07:53
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     26 Files were scanned
      5 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     21 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

29159011

大蜘蛛全挂