8个

显示全部楼层 · 发表于 2007-10-22 21:01:08

D:\anti\8.rar >>RAR >>wmids.exe - Win32/TrojanDownloader.Delf.NUM 木马
D:\anti\8.rar >>RAR >>kbfz.dll - Win32/PSW.QQRob.NAQ 木马的变种
D:\anti\8.rar >>RAR >>kbfz.exe - Win32/PSW.QQRob.NAQ 木马的变种
D:\anti\8.rar >>RAR >>rsjzbpm.dll - Win32/PSW.OnLineGames.FDY 木马的变种
D:\anti\8.rar >>RAR >>rsjzbsp.exe - Win32/PSW.OnLineGames.FDY 木马的变种
已扫描的文件数目：8
已发现的病毒数目：5

nod

显示全部楼层 · 发表于 2007-10-22 21:03:51

卡巴 125
6个

已删除: 木马程序 Trojan.Win32.Delf.adf 文件: F:\病毒样本\8.rar/QQ.exe//RCryptor//RCryptor
已删除: 木马程序 Trojan-Downloader.Win32.Delf.bki 文件: F:\病毒样本\8.rar/wmids.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Backdoor.Win32.Delf.bkt 文件: F:\病毒样本\8.rar/kbfz.dll
已删除: 木马程序 Backdoor.Win32.Delf.bmp 文件: F:\病毒样本\8.rar/kbfz.exe//PolyCrypt
已删除: 木马程序 Trojan-PSW.Win32.Delf.baq 文件: F:\病毒样本\8.rar/rsjzbpm.dll
已删除: 木马程序 Trojan-PSW.Win32.Delf.baq 文件: F:\病毒样本\8.rar/rsjzbsp.exe//UPack

显示全部楼层 · 发表于 2007-10-22 21:11:30

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Multi.wjc
病毒： Backdoor.Jusi.aa
病毒： Trojan.DL.Win32.Agent.zni
病毒： Trojan.PSW.Win32.ZeroOnline.ay
病毒： Trojan.PSW.Win32.ZeroOnline.ay

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.15.02

显示全部楼层 · 发表于 2007-10-22 21:18:58

AVAST6
使用 AntiVirusKit 进行病毒扫描
版本
病毒签名 10/21/2007
开始时间: 10/22/2007 21:10
引擎: AVAST 引擎 (AVKB 17.410)
高启发: 开启
文件: 开启
系统区域: 关闭

扫描选中目录和文件...
项目: QQ.exe\[RCryptor]\[RCryptor]
检查档案: D:\病毒测试\未解压样本\8.rar
状态: 发现病毒
病毒: Win32:AutoRun-DE (AVAST 引擎)
项目: wmids.exe
检查档案: D:\病毒测试\未解压样本\8.rar
状态: 发现病毒
病毒: Win32:Trojan-gen {UPX} (AVAST 引擎)
项目: kbfz.dll
检查档案: D:\病毒测试\未解压样本\8.rar
状态: 发现病毒
病毒: Win32:Qqrob-BK [Trj] (AVAST 引擎)
项目: kbfz.exe
检查档案: D:\病毒测试\未解压样本\8.rar
状态: 发现病毒
病毒: Win32:Qqrob-BK [Trj] (AVAST 引擎)
项目: rsjzbpm.dll
检查档案: D:\病毒测试\未解压样本\8.rar
状态: 发现病毒
病毒: Win32:Onlinegames-BCC [Trj] (AVAST 引擎)
项目: rsjzbsp.exe\[Upack]
检查档案: D:\病毒测试\未解压样本\8.rar
状态: 发现病毒
病毒: Win32:Delf-FNI [Trj] (AVAST 引擎)

显示全部楼层 · 发表于 2007-10-22 21:53:44

金山毒霸2007查出6个，病毒库2007.10.22.17

显示全部楼层 · 发表于 2007-10-22 22:05:52

Result: 3 malware found
Trojan.Win32.Delf.adf (virus)
C:\Users\Administrator\Desktop\8.rar\QQ.exe
Trojan-Downloader.Win32.Delf.bki (virus)
C:\Users\Administrator\Desktop\8.rar\wmids.exe
Backdoor.Win32.Delf.bkt (virus)
C:\Users\Administrator\Desktop\8.rar\kbfz.dll

显示全部楼层 · 发表于 2007-10-22 22:49:42

Result: 6 malware found
Trojan.Win32.Delf.adf (virus)
C:\Users\Administrator\Desktop\8.rar\QQ.exe
Trojan-Downloader.Win32.Delf.bki (virus)
C:\Users\Administrator\Desktop\8.rar\wmids.exe
Backdoor.Win32.Delf.bkt (virus)
C:\Users\Administrator\Desktop\8.rar\kbfz.dll
Backdoor.Win32.Delf.bmp (virus)
C:\Users\Administrator\Desktop\8.rar\kbfz.exe
Trojan-PSW.Win32.Delf.baq (virus)
C:\Users\Administrator\Desktop\8.rar\rsjzbpm.dll
C:\Users\Administrator\Desktop\8.rar\rsjzbsp.exe
6个了

显示全部楼层 · 发表于 2007-10-22 23:02:52

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\8'
C:\Users\morgan\Documents\8\
  kbfz.dll
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!
  kbfz.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!
  QQ.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
   [INFO]    The file was deleted!
  rsjzbpm.dll
   [DETECTION] Is the Trojan horse TR/PSW.Delf.baq
   [INFO]    The file was deleted!
  rsjzbsp.exe
   [DETECTION] Is the Trojan horse TR/Agent.12719
   [INFO]    The file was deleted!
  winint.exe
  winint.sys
  wmids.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年10月22日  08:03
Used time: 00:05 min

The scan has been done completely.

   1 Scanning directories
   8 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   6 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   0 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-22 23:04:31

6个
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\8.rar'
C:\Documents and Settings\Administrator\桌面\8.rar
  [0] Archive type: RAR
  --> QQ.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> wmids.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> kbfz.dll
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> kbfz.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> rsjzbpm.dll
   [DETECTION] Is the Trojan horse TR/PSW.Delf.baq
  --> rsjzbsp.exe
   [DETECTION] Is the Trojan horse TR/Agent.12719
   [WARNING] The file was ignored!

[病毒样本] 8个

本帖子中包含更多资源

13/5