某服务器更新

显示全部楼层 · 发表于 2007-12-3 22:26:55

4个DLL

显示全部楼层 · 发表于 2007-12-3 22:38:44

已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Virtumonde.fp 檔案: C:\Documents and Settings\kato9096\桌面\1203\fill.dll//PE_Patch.PECompact
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Virtumonde.wi 檔案: C:\Documents and Settings\kato9096\桌面\1203\lo1.dll
未發現: 廣告軟體 not-a-virus:AdWare.Win32.Virtumonde.fp 檔案: C:\Documents and Settings\kato9096\桌面\1203\lo2.dll//Virtumonde
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Virtumonde.adx 檔案: C:\Documents and Settings\kato9096\桌面\1203\_lo1.dll

显示全部楼层 · 发表于 2007-12-3 23:55:58

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\1203'
C:\Users\morgan\Documents\1203\
  fill.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumon.v.17
   [INFO]    The file was deleted!
  lo1.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumon.v.17
   [INFO]    The file was deleted!
  lo2.dll
   [DETECTION] Is the Trojan horse TR/Vundo.Gen
   [INFO]    The file was deleted!
  _lo1.dll
   [DETECTION] Is the Trojan horse TR/Dldr.ConHook.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年12月3日  07:55
Used time: 00:05 min

The scan has been done completely.

   1 Scanning directories
   4 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   4 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-4 00:04:37

D:\Download\Scan\fill.dll >>> suspicion for AdvWare.Win32.Virtumonde.fp ( 0B92F0AE 008E8E67 00274037 0024E82F 262708)
D:\Download\Scan\lo1.dll >>> suspicion for AdvWare.Win32.Virtumonde.wi ( 0B8B85D7 0098621A 00226234 00260F7D 263220)

显示全部楼层 · 发表于 2007-12-4 00:12:29

服务器更新跟上面的广告软件有什么分别?

显示全部楼层 · 发表于 2007-12-4 00:25:54

FS报

发现4个恶意软件
AdWare.Win32.Virtumonde.adx (adware)
F:\迅雷和浏览器下载\新建文件夹\1203\_lo1.dll 操作: 已隔离
AdWare.Win32.Virtumonde.fp (adware)
F:\迅雷和浏览器下载\新建文件夹\1203\fill.dll 操作: 已隔离
F:\迅雷和浏览器下载\新建文件夹\1203\lo2.dll 操作: 已隔离
AdWare.Win32.Virtumonde.wi (adware)
F:\迅雷和浏览器下载\新建文件夹\1203\lo1.dll 操作: 已隔离

显示全部楼层 · 发表于 2007-12-4 19:39:30

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： AdWare.Win32.Virtumonde.adx
病毒： Trojan.Vundo.rg
病毒： Adware.Win32.Virtumonde.kl

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.21.11

显示全部楼层 · 发表于 2007-12-4 19:49:12

原帖由 kato9096 于 2007-12-4 00:12 发表
服务器更新跟上面的广告软件有什么分别?

少俩字服务器上的广告更新了

[病毒样本] 某服务器更新

本帖子中包含更多资源

5/3

浏览过的版块