三个

显示全部楼层 · 发表于 2007-11-7 10:39:43

from:

hxxp://b.downadown.cn/ad_2378.exe
hxxp://b.downadown.cn/dodolook324.exe

显示全部楼层 · 发表于 2007-11-7 10:40:32

from:
hxxp://a.downadown.cn/s01.exe

显示全部楼层 · 发表于 2007-11-7 10:41:27

Starting the file scan:

Begin scan in 'E:\ad_2378.rar'
Begin scan in 'E:\dodolook324.rar'
E:\dodolook324.rar
  [0] Archive type: RAR
  --> dodolook324.exe
   [DETECTION] Contains detection pattern of the dropper DR/Cinmus.acc.1
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-7 10:45:42

感染病毒: not-a-virus:AdWare.Win32.Boran.bo
文件: ad_2378[1].rar

感染病毒: not-a-virus:AdWare.Win32.Cinmus.acc (2x), not-a-virus:AdWare.Win32.BHO.ia
文件: dodolook324[1].rar

检测到病毒: Trojan-Downloader.Win32.QQHelper.afr
文件: s01[1].rar

显示全部楼层 · 发表于 2007-11-7 11:02:07

病毒还不错，s01.rar中的病毒真的是QQ病毒吗？

显示全部楼层 · 发表于 2007-11-7 11:18:52

Avast!全杀

显示全部楼层 · 发表于 2007-11-7 11:25:20

ad_2378衍生物
all in: C:\Program Files\yneu\

显示全部楼层 · 发表于 2007-11-7 11:39:28

C:\Documents and Settings\dell\桌面\dodolook324.rar » RAR » dodolook324.exe » NSIS » dodolook324.exe » NSIS » 94.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
C:\Documents and Settings\dell\桌面\dodolook324.rar » RAR » dodolook324.exe » NSIS » ad5114.exe » NSIS » cpush.dll - probably a variant of Win32/Adware.BHO.AV application
C:\Documents and Settings\dell\桌面\dodolook324.rar » RAR » dodolook324.exe » NSIS » ad5114.exe » NSIS » Uninst.exe - Win32/Adware.Cinmus application

显示全部楼层 · 发表于 2007-11-7 12:25:57

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\衍生物.rar'
C:\Users\morgan\Documents\
  衍生物.rar
[0] Archive type: RAR
--> etka.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.3
      [WARNING] Infected files in archives cannot be repaired!
--> ixoe.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.BO
      [WARNING] Infected files in archives cannot be repaired!
--> larh.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
--> nctj.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
--> qfwm.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-11-7 13:10:52

感染病毒: not-a-virus:AdWare.Win32.Boran.bo (5x)
文件: 衍生物[1].rar
目录: C:\Documents and Settings\pMj\Local Settings\Temporary Internet Files\Content.IE5\IXLMZ65W
进程: TheWorld.exe

[病毒样本] 三个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块