今晚最后一包在 FTP 下的

显示全部楼层 · 发表于 2007-10-4 20:17:12

今晚最后一包在 FTP 下的

显示全部楼层 · 发表于 2007-10-4 20:18:22

木马名称:Backdoor.Win32.Huigezi.xms

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\CRR3.INI
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Delf.bwr

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\CRR.INI
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-10-4 20:21:21

卡巴斯基反病毒软件 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=135300 is infected with Heur.Trojan.Generic virus

显示全部楼层 · 发表于 2007-10-4 20:21:49

tokol o skenováníDatum: 4. ?jna 2007 20:20:42Cíl:
G:\V\5.rar
Možnosti:

Skenovací metoda	Všechny soubory
Heuristika	Povoleno
Použít virtuální počítač	Ano
Skenovat archívy	Ano
Použít vyřazené přípony	Ne
Vyřazené přípony	Není definováno
Použít vyřazené objekty	Ne
Vyřazené objekty	Není definováno

Verze antiviru:
TrustPort Workstation Antivirus 2.7.0.1419
Výsledky:
Soubory:

Cesta	Výsledek skenování	Jméno viru	Provedená akce
G:\V\5.rar:\crr.ini	Infikováno!	Delf.BTH	Do karantény
G:\V\5.rar	Infikováno!	Delf.BTH	Karanténa

Statistika
Zaváděcí sektory:

Oskenováno:	0
Infikováno:	0
Opraveno:	0

Soubory:

Oskenováno:	4
Infikováno:	1
Opraveno:	0
Přejmenováno:	0
Přesunuto do karantény:	1
Smazáno:	0

Registry:

Oskenováno:	0
Infikováno:	0
Opraveno:	0
Smazáno:	0

显示全部楼层 · 发表于 2007-10-4 20:24:41

2007-10-4 20:24:29 1191500669 Administrator 2648 Sign of "Win32:Agent-JRH [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\5.rar\crr.ini\[PECompact]" file.

显示全部楼层 · 发表于 2007-10-4 20:25:11

未杀。

显示全部楼层 · 发表于 2007-10-4 20:28:03

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\5.rar'
C:\Documents and Settings\tim\桌面\5.rar
  [0] Archive type: RAR
  --> crr3.ini
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> crr.ini
   [DETECTION] Is the Trojan horse TR/Agent.20992.18
   [INFO]    A backup was created as '4776dc75.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: Thursday, 4 October, 2007  20:27
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   2 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-4 20:33:27

NOD32

显示全部楼层 · 发表于 2007-10-4 20:54:47

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.2.8
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\5.rar>>crr.ini 检测到 Trojan.Agent.qt
任务扫描完成。共耗费的时间：0-00-00 00:00:00:0875，共扫描的文件数量：3，共扫描到的威胁数量：1，威胁率：0.33333333

显示全部楼层 · 发表于 2007-10-4 20:58:30

我晕，微点都已知，卡7还启发……
已删除：病毒 Heur.Trojan.Generic (修改) 文件　: C:\Users\user\Downloads\5.rar/crr3.ini//PE-Armor//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
已删除：病毒 Worm.Win32.Wogue.q 文件　: C:\Users\user\Downloads\5.rar/crr.ini//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE

[病毒样本] 今晚最后一包在 FTP 下的

本帖子中包含更多资源

RX19.43.30

本帖子中包含更多资源

浏览过的版块