今天卖的mp3里面好多病毒啊！

显示全部楼层 · 发表于 2007-10-12 22:33:37

晕！那些厂家不知道怎么回事！拿回来就有好多病毒。

显示全部楼层 · 发表于 2007-10-12 22:34:27

C:\ABC\gsmbqusk.rar:\gsmbqusk.exe - 特征码 'Virus.Win32.AutoRun.br' 被发现
C:\ABC\gsmbqusk.rar:\RECYCLER\Lcass.exe - 特征码 'Worm.Win32.VB.gd' 被发现
C:\ABC\gsmbqusk.rar:\auto.exe - 特征码 'Trojan-PWS.Win32.Agent.BU' 被发现
C:\ABC\gsmbqusk.rar:\explorer.exe - 特征码 'Trojan.Win32.Tiny.e' 被发现
C:\ABC\gsmbqusk.rar:\fooool.exe - 特征码 'Trojan.Win32.Tiny.e' 被发现
C:\ABC\gsmbqusk.rar

显示全部楼层 · 发表于 2007-10-12 22:36:48

C:\Documents and Settings\Don johnson\桌面\gsmbqusk.rar » RAR » gsmbqusk.exe - Win32/AutoRun.E worm
C:\Documents and Settings\Don johnson\桌面\gsmbqusk.rar » RAR » RECYCLER\Lcass.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\gsmbqusk.rar » RAR » auto.exe - a variant of Win32/TrojanDownloader.Flux trojan
C:\Documents and Settings\Don johnson\桌面\gsmbqusk.rar » RAR » explorer.exe - Win32/Tiny.E trojan
C:\Documents and Settings\Don johnson\桌面\gsmbqusk.rar » RAR » fooool.exe - Win32/Tiny.NAB trojan

显示全部楼层 · 发表于 2007-10-12 22:47:08

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.5
双引擎反病毒签名 2007-10-12
开始时间: 2007-10-12 22:42
引擎: KAV 引擎 (AVK 17.8716), BD 引擎 (BD 17.5530)
高启发式: 打开
压缩文件: 打开
系统区域: 关闭

扫描所选择的目录和文件...
对象: gsmbqusk.exe
在压缩档案里: D:\病毒测试\未解压样本\gsmbqusk.rar
Status: 已发现病毒
病毒: Virus.Win32.AutoRun.br (KAV 引擎)
对象: RECYCLER Lcass.exe
在压缩档案里: D:\病毒测试\未解压样本\gsmbqusk.rar
Status: 已发现病毒
病毒: Worm.Win32.VB.gd (KAV 引擎)
对象: auto.exe
在压缩档案里: D:\病毒测试\未解压样本\gsmbqusk.rar
Status: 已发现病毒
病毒: Backdoor.Win32.Agent.ahj (KAV 引擎)
对象: explorer.exe
在压缩档案里: D:\病毒测试\未解压样本\gsmbqusk.rar
Status: 已发现病毒
病毒: Trojan.Win32.Tiny.e (KAV 引擎)
对象: fooool.exe
在压缩档案里: D:\病毒测试\未解压样本\gsmbqusk.rar
Status: 已发现病毒
病毒: Trojan.Win32.Tiny.e (KAV 引擎)

显示全部楼层 · 发表于 2007-10-12 22:51:46

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\gsmbqusk.rar'
C:\Documents and Settings\Administrator\桌面\gsmbqusk.rar
  [0] Archive type: RAR
  --> gsmbqusk.exe
   [DETECTION] Is the Trojan horse TR/Agent.358ee5
  --> RECYCLER\Lcass.exe
   [DETECTION] Contains detection pattern of the worm WORM/VB.GD.15
  --> auto.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.554 Backdoor server programs
  --> explorer.exe
   [DETECTION] Is the Trojan horse TR/Tiny.E
  --> fooool.exe
   [DETECTION] Is the Trojan horse TR/Tiny.E.1
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-12 22:54:10

Begin scan in 'C:\Documents and Settings\dell\桌面\gsmbqusk.rar'
C:\Documents and Settings\dell\桌面\gsmbqusk.rar
  [0] Archive type: RAR
  --> gsmbqusk.exe
   [DETECTION] Is the Trojan horse TR/Agent.358ee5
  --> RECYCLER\Lcass.exe
   [DETECTION] Contains detection pattern of the worm WORM/VB.GD.15
  --> auto.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.554 Backdoor server programs
  --> explorer.exe
   [DETECTION] Is the Trojan horse TR/Tiny.E
  --> fooool.exe
   [DETECTION] Is the Trojan horse TR/Tiny.E.1
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

End of the scan: 2007年10月12日  22:52
Used time: 00:17 min

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   5 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:

显示全部楼层 · 发表于 2007-10-12 22:56:34

detected: virus Virus.Win32.AutoRun.br File: C:\Documents and Settings\Owner\×ÀÃæ\gsmbqusk.rar/gsmbqusk.exe//UPX
detected: virus Worm.Win32.VB.gd File: C:\Documents and Settings\Owner\×ÀÃæ\gsmbqusk.rar/RECYCLER\Lcass.exe
detected: Trojan program Backdoor.Win32.Agent.ahj File: C:\Documents and Settings\Owner\×ÀÃæ\gsmbqusk.rar/auto.exe
detected: Trojan program Trojan.Win32.Tiny.e File: C:\Documents and Settings\Owner\×ÀÃæ\gsmbqusk.rar/explorer.exe
detected: Trojan program Trojan.Win32.Tiny.e File: C:\Documents and Settings\Owner\×ÀÃæ\gsmbqusk.rar/fooool.exe

显示全部楼层 · 发表于 2007-10-12 23:27:55

2007-10-12 23:26:47,Trojan Horse,Quarantined,fooool.exe
2007-10-12 23:26:47,Trojan Horse,Quarantined,explorer.exe
2007-10-12 23:26:46,W32.Popwin,Quarantined,auto.exe
2007-10-12 23:26:46,W32.Cassel,Quarantined,Lcass.exe
2007-10-12 23:26:45,Trojan.Adclicker,Quarantined,gsmbqusk.exe

显示全部楼层 · 发表于 2007-10-12 23:39:56

老毒，老鹰竟然全都报已知

显示全部楼层 · 发表于 2007-10-12 23:58:24

拿回来就有很多毒，估计是被使用过了，可能还是翻修货呢

[病毒样本] 今天卖的mp3里面好多病毒啊！

本帖子中包含更多资源

浏览过的版块