4个

显示全部楼层 · 发表于 2007-11-1 18:24:11

csrss32.exe\[UPX]\[Embedded#036a] : Win32:Small-GTK [Trj]
MulDist.ocx , UniDist.ocx： Win32:DyfucDldr-J [Trj]
Free_Sex_Download.exe : Win32:Dialer-gen [Trj]

显示全部楼层 · 发表于 2007-11-1 18:24:47

Result: 4 malware found
Trojan-Clicker.Win32.Small.kj (virus)
C:\Users\Administrator\Desktop\1101[4].rar\csrss32.exe
Trojan-Downloader.Win32.Dyfuca.x (virus)
C:\Users\Administrator\Desktop\1101[4].rar\MulDist.ocx
Trojan-Downloader.Win32.Dyfuca.bm (virus)
C:\Users\Administrator\Desktop\1101[4].rar\UniDist.ocx
Porn-Dialer.Win32.PluginAccess.s (pornware)
C:\Users\Administrator\Desktop\1101[4].rar\Free_Sex_Download.exe

显示全部楼层 · 发表于 2007-11-1 18:31:20

deleted: Trojan program Trojan-Clicker.Win32.Small.kj File: C:\Users\Jack Jones\Desktop\1101[4].rar/csrss32.exe//PE_Patch.UPX//UPX deleted: Trojan program Trojan-Downloader.Win32.Dyfuca.x File: C:\Users\Jack Jones\Desktop\1101[4].rar/MulDist.ocx deleted: Trojan program Trojan-Downloader.Win32.Dyfuca.bm File: C:\Users\Jack Jones\Desktop\1101[4].rar/UniDist.ocx deleted: pornware not-a-virus:Porn-Dialer.Win32.PluginAccess.s File: C:\Users\Jack Jones\Desktop\1101[4].rar/Free_Sex_Download.exe//UPX

显示全部楼层 · 发表于 2007-11-1 18:36:43

四个小红伞全杀……

显示全部楼层 · 发表于 2007-11-1 18:42:34

对象: csrss32.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\1101[4].rar
Status: 已发现病毒
病毒: Trojan-Clicker.Win32.Small.kj (KAV 引擎), Trojan.Clicker.Small.KJ (BD 引擎)
对象: MulDist.ocx
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\1101[4].rar
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Dyfuca.x (KAV 引擎), Trojan.Downloader.Dyfuca.X (BD 引擎)
对象: UniDist.ocx
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\1101[4].rar
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Dyfuca.bm (KAV 引擎), Trojan.Downloader.Dyfuca.BM (BD 引擎)
对象: Free_Sex_Download.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\1101[4].rar
Status: 已发现病毒
病毒: not-a-virus:Porn-Dialer.Win32.PluginAccess.s (KAV 引擎), Dialer.Coulomb.A (BD 引擎)
对象: 1101[4].rar
路径: C:\Documents and Settings\wangcheng\桌面
Status: 已发现病毒
病毒: Trojan-Clicker.Win32.Small.kj, Trojan-Downloader.Win32.Dyfuca.x, Trojan-Downloader.Win32.Dyfuca.bm, not-a-virus:Porn-Dialer.Win32.PluginAccess.s (KAV 引擎), Trojan.Clicker.Small.KJ, Trojan.Downloader.Dyfuca.X, Trojan.Downloader.Dyfuca.BM, Dialer.Coulomb.A (BD 引擎)
扫描完成: 2007-11-1 18:42
已检查 1 个文件
已发现 1 个染毒文件

显示全部楼层 · 发表于 2007-11-1 19:58:18

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 786
Paranoia Database - 48413
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\csrss32.exe - Suspected MaliciousScope:GENERIC.MALWARE.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MulDist.ocx - Infected TROJAN-DOWNLOADER.DYFUCA.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\UniDist.ocx - Infected TROJAN-DOWNLOADER.DYFUCA.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\Free_Sex_Download.exe - Suspected TROJAN-DOWNLOADER (HTTP://{REMOVED}/...)

4 Files scanned
2 Infected files found
2 Suspected files found
0 Files disinfected
2 Files deleted

显示全部楼层 · 发表于 2007-11-1 21:36:33

C:\Documents and Settings\Don johnson\桌面\1101[4].rar » RAR » csrss32.exe - Win32/TrojanClicker.Small.NBH trojan
C:\Documents and Settings\Don johnson\桌面\1101[4].rar » RAR » MulDist.ocx - Win32/TrojanDownloader.Dyfica.X trojan
C:\Documents and Settings\Don johnson\桌面\1101[4].rar » RAR » UniDist.ocx - Win32/TrojanDownloader.Dyfica.BM trojan
C:\Documents and Settings\Don johnson\桌面\1101[4].rar » RAR » Free_Sex_Download.exe - a variant of Win32/Dialer.DialHub application

显示全部楼层 · 发表于 2007-11-1 22:57:23

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\1101[4].rar'
C:\Users\morgan\Documents\
  1101[4].rar
[0] Archive type: RAR
--> csrss32.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> MulDist.ocx
      [DETECTION] Is the Trojan horse TR/Dldr.Dyfuca.X
      [WARNING] Infected files in archives cannot be repaired!
--> UniDist.ocx
      [DETECTION] Is the Trojan horse TR/Dldr.Dyfuca.BM
      [WARNING] Infected files in archives cannot be repaired!
--> Free_Sex_Download.exe
      [DETECTION] Contains detection pattern of the dial-up program DIAL/302273
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-2 10:11:28

都是老毒了

2007-11-2 10:11:07 1193969467 Administrator 2612 Sign of "Win32:Small-GTK [Trj]" has been found in "D:\Downloads\1101[4].rar\csrss32.exe\[UPX]\[Embedded#036a]" file.
2007-11-2 10:11:09 1193969469 Administrator 2612 Sign of "Win32:DyfucDldr-J [Trj]" has been found in "D:\Downloads\1101[4].rar\MulDist.ocx" file.
2007-11-2 10:11:09 1193969469 Administrator 2612 Sign of "Win32:DyfucDldr-J [Trj]" has been found in "D:\Downloads\1101[4].rar\UniDist.ocx" file.
2007-11-2 10:11:09 1193969469 Administrator 2612 Sign of "Win32:Dialer-gen [Trj]" has been found in "D:\Downloads\1101[4].rar\Free_Sex_Download.exe" file.

[病毒样本] 4个

本帖子中包含更多资源

本帖子中包含更多资源