几个流行网马的更新[MD5: F4DF38 E7BCF5 89D9AE 773D08 049E79]

promised

IllusionWing

全杀

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.1
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [nFile Detect 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\样本2.rar>>Hook.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\样本2.rar>>Hook.exe 检测到 Generic.nFile
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\样本2.rar>>qvicuje.exe 检测到 Packed.Generic.Modified
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\样本2.rar>>sedrsvedt.exe//UPX 检测到 Win32.AutorunU
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\样本2.rar>>Systems 检测到 Packed.Unknown.idata2
检测到了 4 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:00:0297，共扫描的文件数量：7，共扫描到的威胁数量：5，威胁率：71.43%，扫描速率： 23.57 文件/秒，扫描速度： 4526.75 千字节/秒，共扫描了 1344.45 千字节。

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Lineage.mug   
病毒： Trojan.PSW.Lineage.msb   

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.43.60

yurius

--> Hook.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> sedrsvedt.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> qvicuje.exe
        [DETECTION] Is the Trojan horse TR/Agent.32245
        [WARNING]   Infected files in archives cannot be repaired!
    --> Systems
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> Hook.dll
        [DETECTION] Is the Trojan horse TR/PWS.Lineage.ZQ.3
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 329
Paranoia Database - 6899
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Hook.exe - Suspected MalwareDetector:Win32.Generic.PSW.16
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\sedrsvedt.exe - Infected Win32.Trojan-Downloader.zlob.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\qvicuje.exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Systems - Suspected MalwareDetector:Win32.Generic.PSW.16
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Hook.dll - Suspected MalwareDetector:Win32.Generic.PSW.16

5 Files scanned
1 Infected files found
4 Suspected files found
0 Files cured
1 Files deleted

killloop

江民3个

欠妳緈諨

使用 AntiVirusKit 进行病毒扫描
版本
病毒签名 10/7/2007
开始时间: 10/7/2007 21:25
引擎: KAV 引擎 (AVK 17.8644), AVAST 引擎 (AVKB 17.396)
高启发: 开启
文件: 开启
系统区域: 关闭

扫描选中目录和文件...
项目: sedrsvedt.exe
        检查档案: D:\病毒测试\未解压样本\样本2.rar
        状态: 发现病毒
        病毒: Virus.Win32.AutoRun.hw (KAV 引擎)
项目: qvicuje.exe
        检查档案: D:\病毒测试\未解压样本\样本2.rar
        状态: 发现病毒
        病毒: Virus.Win32.AutoRun.rx (KAV 引擎)

Nblock

楼主有没有网址 我要去点

micetai

NIS2008
Unresolved Threats:
W32.Fubalca.E
Virus ID: 15525
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[sedrsvedt.exe] inside of [c:\users\m\desktop\a2.rar] - Infected
W32.Dotex
Virus ID: 39122
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed

The EQs

C:\Documents and Settings\Don johnson\桌面\样本2\Hook.dll - a variant of Win32/PSW.Lineage.DN trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\样本2\qvicuje.exe - probably a variant of Win32/Delf.NDF worm - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\样本2\sedrsvedt.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\样本2\Systems - probably unknown NewHeur_PE virus - deleted - quarantined