毒网更新

显示全部楼层 · 发表于 2007-12-7 19:20:11

这些毒..更新了还是一样垃圾..

avast 漏一个
Win32:VB-ESA [Trj] \cmxontgA.exe
Win32:Agent-CWW [Trj] \offun.exe
Win32:Adloader-KH [Trj] \adkseimop43855.exe\$PROGRAMFILES\TTC.dll
Win32:Adware-gen [Adw] \adkseimop43855.exe
Win32:Trojan-gen {Other} \cmxontg.exe
Win32:Adware-gen [Adw] \dls0523pmw.exe\[Embedded#70b0]
Win32:Trojan-gen {VC} \dls0523pmw.exe
Win32:Adware-gen [Adw] \rau001978.exe
Win32:Agent-GQC [Trj] \2.exe\[UPX]
Win32:Small-HLG [Trj] \ldcore.dll

[ 本帖最后由 qianwenxiang 于 2007-12-7 19:34 编辑 ]

显示全部楼层 · 发表于 2007-12-7 19:20:36

MicroVita AntiSpyware
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\120702\cmxontgA.exe]
                  …………发现Spy！报告:[1] Win32.Packer4
文件信息:  大小:666352  MD5:b060ce8264ce817d6f87aaeea9c2935e

文件数:9 病毒数:1  比重:0.1111111111111
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎
[2] 文件特征码引擎
[1] 文件启发式引擎

[ 本帖最后由 FBAV 于 2007-12-7 19:23 编辑 ]

显示全部楼层 · 发表于 2007-12-7 19:23:22

Starting the file scan:

Begin scan in 'E:\120702.rar'
E:\120702.rar
  [0] Archive type: RAR
  --> cmxontgA.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> offun.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> cmxontg.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.MU.63
  --> dls0523pmw.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.bqw.2
  --> 2.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/WinRem.2 Backdoor server programs
  --> ms1009.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.cuo
  --> ldcore.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Small.dxm.3
   [INFO]    The file was deleted!

End of the scan: 2007年12月7日  19:24
Used time: 00:19 min

The scan has been done completely.

   0 Scanning directories
   10 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-7 19:26:36

ESS7个

显示全部楼层 · 发表于 2007-12-7 19:54:06

C:\120702.rar\offun.exe - is an AdWare program Adware.Bagon
C:\120702.rar\adkseimop43855.exe\data002 - is an AdWare program Adware.Websearch
C:\120702.rar\cmxontg.exe - infected with Trojan.MulDrop.4522
C:\120702.rar\2.exe - infected with Trojan.DownLoader.36483
C:\120702.rar\ldcore.dll - infected with Trojan.DownLoader.18468

Archive contains 5 infected items

DRWEB 4.44

显示全部楼层 · 发表于 2007-12-7 20:04:09

检测到：木马程序 Trojan-Downloader.Win32.VB.ang 文件　: F:\du\120702.rar/cmxontgA.exe//PE_Patch//TeLock
检测到：广告程序 not-a-virus:AdWare.Win32.TTC.b 文件　: F:\du\120702.rar/adkseimop43855.exe//data0002
检测到：木马程序 Trojan-Dropper.Win32.Agent.mu 文件　: F:\du\120702.rar/cmxontg.exe//PE_Patch//TeLock
检测到：木马程序 Trojan-Downloader.Win32.Zlob.bqw 文件　: F:\du\120702.rar/dls0523pmw.exe
检测到：木马程序 Backdoor.Win32.Small.oo 文件　: F:\du\120702.rar/2.exe//UPX
检测到：木马程序 Trojan-Dropper.Win32.Agent.cuo 文件　: F:\du\120702.rar/ms1009.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.dxm 文件　: F:\du\120702.rar/ldcore.dll

显示全部楼层 · 发表于 2007-12-7 22:12:53

offun.exe_, rau001978.exe_

No malicious code were found in these files.

显示全部楼层 · 发表于 2007-12-7 22:20:13

红伞九个

显示全部楼层 · 发表于 2007-12-7 22:25:42

全杀

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.5.6
HC0.rlb = 3.9.4
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 1] 在 E:\Documents and Settings\Administrator\桌面\win\120702\2.exe//UPX 检测到 Generic.Virus
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\win\120702\adkseimop43855.exe//folder.js 检测到 Script.ControlFile
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\win\120702\adkseimop43855.exe//TTC.dll 检测到 Dropper.Agent.sq
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\win\120702\cmxontg.exe 检测到 Packed.Unknown.Modified
[扫描] [nFile Detect 2] 在 E:\Documents and Settings\Administrator\桌面\win\120702\cmxontgA.exe 检测到 Generic.nFile
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\win\120702\dls0523pmw.exe 检测到 Generic.Binder
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\win\120702\ldcore.dll 检测到 Adware.D4M
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\win\120702\ms1009.exe 检测到 Trojan.Hrqty
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\win\120702\offun.exe 检测到 Packed.Unknown.Modified
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\win\120702\rau001978.exe//UPX 检测到 Dropper.Agent.sq
检测到了 5 个未知的恶意程序，请上报。
任务扫描完成。共耗费的时间：0-00-00 00:00:00:0937，共扫描的文件数量：16，共扫描到的威胁数量：10，威胁率：62.5%，扫描速率： 17.08 文件/秒，扫描速度： 1346.82 千字节/秒，共扫描了 1261.97 千字节。

显示全部楼层 · 发表于 2007-12-8 08:44:36

C:\ABC\120702.rar:\cmxontgA.exe - 特征码 'Trojan-Downloader.Win32.VB.ang' 被发现
C:\ABC\120702.rar:\offun.exe - 特征码 'IM-Worm.Win32.VB.bl' 被发现
C:\ABC\120702.rar:\adkseimop43855.exe - 特征码 'not-a-virus:AdWare.Win32.TTC.b' 被发现
C:\ABC\120702.rar:\cmxontg.exe - 特征码 'Trojan-Dropper.Win32.Agent.MU' 被发现
C:\ABC\120702.rar:\dls0523pmw.exe - 特征码 'Trojan-Downloader.Win32.Zlob.bqw' 被发现
C:\ABC\120702.rar:\rau001978.exe - 特征码 'Trojan-Downloader.Searchclickads.A' 被发现
C:\ABC\120702.rar:\2.exe - 特征码 'Backdoor.Win32.Agent.sp' 被发现
C:\ABC\120702.rar:\ms1009.exe - 特征码 'Trojan-Dropper.Win32.Agent.cuo' 被发现
C:\ABC\120702.rar:\ldcore.dll - 特征码 'Trojan-Downloader.Win32.Small.dxm' 被发现
C:\ABC\120702.rar

[病毒样本] 毒网更新

本帖子中包含更多资源