[病毒样本] 4/4

显示全部楼层 · 发表于 2008-1-7 22:54:16

卡巴

已删除: 风险软件 not-a-virus:AdTool.Win32.WhenU.a 文件: F:\病毒样本\010704.rar/SecureInstall_LOFS020701Inst.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.gbh 文件: F:\病毒样本\010704.rar/43.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Trojan-Downloader.Win32.Agent.gbh 文件: F:\病毒样本\010704.rar/1.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Trojan.Win32.BHO.afz 文件: F:\病毒样本\010704.rar/pbho.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Trojan.Win32.Dialer.cj 文件: F:\病毒样本\010704.rar/sms.exe//UPX
已删除: 木马程序 Trojan.Win32.EliteBar.h 文件: F:\病毒样本\010704.rar/setup_file.exe

显示全部楼层 · 发表于 2008-1-7 22:54:18

Begin scan in 'D:\Downloads\样本\010704.rar'
D:\Downloads\样本\010704.rar
  [0] Archive type: RAR
  --> SecureInstall_LOFS020701Inst.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Whenu.A.9
  --> s01.exe
   [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
  --> 43.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> pbho.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> sms.exe
   [DETECTION] Contains detection pattern of the dial-up program DIAL/302390
  --> setup_file.exe
   [DETECTION] Is the Trojan horse TR/EliteBar.H.1
   [WARNING] The file was ignored!

End of the scan: 2008年1月7日  22:51
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   8 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-7 22:54:43

C:\Documents and Settings\Don johnson\桌面\010704.rar » RAR » SecureInstall_LOFS020701Inst.exe - Win32/Adware.WhenU.SaveNow application
C:\Documents and Settings\Don johnson\桌面\010704.rar » RAR » 43.exe - Win32/Agent.NNA trojan
C:\Documents and Settings\Don johnson\桌面\010704.rar » RAR » sms.exe - a variant of Win32/Dialer trojan
C:\Documents and Settings\Don johnson\桌面\010704.rar » RAR » setup_file.exe - Win32/TrojanDropper.Agent.TV trojan

显示全部楼层 · 发表于 2008-1-7 22:56:33

未报的全部上报

显示全部楼层 · 发表于 2008-1-8 00:45:43

D:\1\010704.rar\SecureInstall_LOFS020701Inst.exe - is an AdWare program Adware.SaveNow
D:\1\010704.rar\43.exe - infected with Trojan.LowZones.706
D:\1\010704.rar\1.exe - infected with Trojan.LowZones.706
D:\1\010704.rar\pbho.exe - infected with Trojan.Click.origin
D:\1\010704.rar\sms.exe - is a Dialer program Dialer.Ticonni
D:\1\010704.rar\setup_file.exe - is an AdWare program Adware.EliteBar

Archive contains 6 infected items

显示全部楼层 · 发表于 2008-1-8 01:00:57

费尔

显示全部楼层 · 发表于 2008-1-8 03:21:09

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 3:21:18 2008-1-8

+ Scan result:

C:\Documents and Settings\Administrator\桌面\010704.rar/sms.exe -> Trojan.Dialer.cj : No action taken.
C:\Documents and Settings\Administrator\桌面\010704.rar/setup_file.exe -> Trojan.EliteBar.h : No action taken.

::Report end

显示全部楼层 · 发表于 2008-1-8 11:04:20

008-1-8 11:07:28 010704.rar C:\Documents and Settings\zh\桌面 3
SecureInstall_LOFS020701Inst.exe Adware.SaveNow
sms.exe Dialer.Ticonni
setup_file.exe Adware.EliteBar

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Dialer.dev
病毒： Trojan.EliteBar.h

用户来源：互联网

软件版本：20.26.02

显示全部楼层 · 发表于 2008-1-8 12:21:46

"Win32:Trojan-gen {Other}" pbho.exe
"Win32:Adware-gen [Adw]" SecureInstall_LOFS020701Inst.exe\VVSN.exe
"Win32:EliteBar-D [Trj]" setup_file.exe
"Win32:Dialer-622 [Trj]" sms.exe

[病毒样本] 4/4

本帖子中包含更多资源

本帖子中包含更多资源

avast! 4