[病毒样本] 2+3

显示全部楼层 · 发表于 2007-10-30 22:20:05

2个VB的跟其中一个下载的三个

显示全部楼层 · 发表于 2007-10-30 22:23:00

detected: Trojan program Trojan-Dropper.Win32.Mudrop.eo File: C:\Documents and Settings\Owner\×ÀÃæ\SAMPLE.rar/tfp.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.VB.bko File: C:\Documents and Settings\Owner\×ÀÃæ\SAMPLE.rar/alcwzrd.exe
detected: virus Virus.Win32.AutoRun.ny File: C:\Documents and Settings\Owner\×ÀÃæ\SAMPLE.rar/ineters.exe
detected: virus Virus.Win32.AutoRun.ob File: C:\Documents and Settings\Owner\×ÀÃæ\SAMPLE.rar/SoundMan.exe//NSPack

显示全部楼层 · 发表于 2007-10-30 22:23:56

Starting the file scan:

Begin scan in 'E:\SAMPLE.rar'
E:\SAMPLE.rar
  [0] Archive type: RAR
  --> tfp.exe
   [DETECTION] Is the Trojan horse TR/Drop.Mudrop.EO
  --> alcwzrd.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.bko
  --> ineters.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> SoundMan.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> Installer.exe
   [DETECTION] Is the Trojan horse TR/VB.buf
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-30 22:25:12

C:\Documents and Settings\Don johnson\桌面\SAMPLE.rar » RAR » tfp.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\SAMPLE.rar » RAR » alcwzrd.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\SAMPLE.rar » RAR » ineters.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\SAMPLE.rar » RAR » SoundMan.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\SAMPLE.rar » RAR » Installer.exe - probably unknown NewHeur_PE virus

显示全部楼层 · 发表于 2007-10-30 22:27:34

Begin scan in 'C:\Documents and Settings\Administrator\桌面\SAMPLE.rar'
C:\Documents and Settings\Administrator\桌面\SAMPLE.rar
  [0] Archive type: RAR
  --> tfp.exe
   [DETECTION] Is the Trojan horse TR/Drop.Mudrop.EO
  --> alcwzrd.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.bko
  --> ineters.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> SoundMan.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> Installer.exe
   [DETECTION] Is the Trojan horse TR/VB.buf
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-30 23:16:53

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 736
Paranoia Database - 48287
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\tfp.exe - Infected MaliciousScope:TROJAN-DROPPER.MUDROP.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\alcwzrd.exe - Suspected MaliciousScope:TROJAN-DOWNLOADER.DELF.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\ineters.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\SoundMan.exe - Suspected MaliciousScope:TROJAN-DOWNLOADER.DELF.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\Installer.exe - Suspected TROJAN-PSW.ONLINEGAMES.2

5 Files scanned
1 Infected files found
3 Suspected files found
0 Files disinfected
1 Files deleted

显示全部楼层 · 发表于 2007-10-30 23:18:20

卡巴6不让下呀!

显示全部楼层 · 发表于 2007-10-30 23:27:51

显示全部楼层 · 发表于 2007-10-30 23:40:56

显示全部楼层 · 发表于 2007-10-31 09:55:28

微点砍掉

[病毒样本] 2+3

本帖子中包含更多资源

5个动态启发

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源