19个

显示全部楼层 · 发表于 2008-1-11 19:38:57

剩下来的这些合在一块发了横跨亚欧大陆的东西太乱记不得从哪些网站挖出来的了

显示全部楼层 · 发表于 2008-1-11 19:40:42

Starting the file scan:

Begin scan in 'E:\tpack.rar'
E:\tpack.rar
  [0] Archive type: RAR
  --> drone.exe
   [DETECTION] Contains detection pattern of the dropper DR/VB.apv.5
  --> my_70145.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.gmc
  --> fepsexnow.exe
   [DETECTION] Is the Trojan horse TR/Click.Agen.IP.46
  --> ga.exe
   [DETECTION] Contains detection pattern of the dropper DR/KillAV.GU
   [1] Archive type: ZIP SFX (self extracting)
   --> run.bat
      [DETECTION] Contains detection pattern of the batch virus BAT/Baidu
   --> ga.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   --> kill.bat
      [DETECTION] Contains detection pattern of the batch virus BAT/KillAV.EF
   --> kill.vbs
      [DETECTION] Contains detection pattern of the VBS script virus VBS/Runner.AA
   --> knlps.exe
      [DETECTION] Contains detection pattern of the SPR/PsKill.N program
  --> w3.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> happy.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> smss.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> ie.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> ie2.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> tt1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.bqz
  --> orkut.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Banload.bza
  --> setup.exe
   [DETECTION] Contains detection pattern of the dropper DR/BHO.aop
  --> vip
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.SU
  --> 0603.exe
   [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
  --> webcam.exe
   [DETECTION] Contains detection pattern of the worm WORM/Rbot.Gen
  --> win.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agen.QT.3
  --> hp.exe
   [DETECTION] Is the Trojan horse TR/StartPage.CWL
   [WARNING] The file was ignored!

End of the scan: 2008年1月11日  19:41
Used time: 00:26 min

The scan has been done completely.

   0 Scanning directories
   25 Files were scanned
   22 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   2 Archives were scanned
   1 Warnings
   0 Notes

1个没报~ 已上报~

[ 本帖最后由 Graybird 于 2008-1-11 19:52 编辑 ]

显示全部楼层 · 发表于 2008-1-11 19:42:21

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DownSpy.a
病毒： Trojan.DL.Win32.Agent.zxn
病毒： Trojan.Clicker.Win32.Agent.ip
病毒： Packer.Win32.VmpPacker.a
病毒： Trojan.Win32.Mnless.zyt
病毒： Packer.Win32.Mian007.a
病毒： Trojan.DL.Win32.Small.aba
病毒： Trojan.Win32.Agent.zri
病毒： Trojan.DL.Win32.Banload.bza
病毒： Trojan.PSW.Win32.Agent.vqn
病毒： Trojan.Spy.Banbra.jet
病毒： Backdoor.Win32.Rbot.GEN
病毒： Worm.Mail.Zhelatin.fu
病毒： Trojan.Win32.StartPage.s

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.26.42

显示全部楼层 · 发表于 2008-1-11 19:42:44

only 13..

显示全部楼层 · 发表于 2008-1-11 19:48:56

呵呵,EQ全部拦截

第一个生成了一个XT.BAT的东西

生成物来勒~~~

BAT的内容:
:try
del "C:\Documents and Settings\Administrator\桌面\0603.exe"
if exist "C:\Documents and Settings\Administrator\桌面\0603.exe" goto try
del %0

显示全部楼层 · 发表于 2008-1-11 19:50:22

D:\download\tpack.rar>>svchost.exe Adware.ShopNav.d.km 广告程序还未处理
D:\download\tpack.rar>>drone.exe Backdoor.VB.apv.fwzx.arc 后门还未处理
D:\download\tpack.rar>>my_70145.exe TrojanDownloader.Small.gmc.hwwq 木马还未处理
D:\download\tpack.rar>>fepsexnow.exe TrojanClicker.Agent.ip.rbaq 木马还未处理
D:\download\tpack.rar>>ga.exe>>ga.exe Trojan.IMMSG.TBMSG.yiy.qfvg 木马还未处理
D:\download\tpack.rar>>w3.exe TrojanDownloader.Nurech.bd.bmqk 木马还未处理
D:\download\tpack.rar>>happy.exe TrojanPSW.OnLineGames.nma.xjzz 木马还未处理
D:\download\tpack.rar>>smss.exe Packed.NSAnti.r.urgl 可疑程序还未处理
D:\download\tpack.rar>>tt1.exe TrojanPSW.Delf.ads.ifed 木马还未处理
D:\download\tpack.rar>>setup.exe Trojan.BHO.aop.mwnn.arc 木马还未处理
D:\download\tpack.rar>>vip TrojanDownloader.Agent.hco.cwzo 木马还未处理
D:\download\tpack.rar>>0603.exe TrojanPSW.GamePass.aetl.gato 木马还未处理
D:\download\tpack.rar>>messenger-8.0.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\tpack.rar>>webcam.exe Backdoor.Rbot.djt.ehvv 后门还未处理
D:\download\tpack.rar>>win.exe Trojan.Agent.qt.hnbb 木马还未处理
D:\download\tpack.rar>>hp.exe Trojan.StartPage.arc.dvxw 木马还未处理

显示全部楼层 · 发表于 2008-1-11 20:07:03

The file '_xr.bat' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

显示全部楼层 · 发表于 2008-1-11 20:27:54

EAV 3.0 2783 18
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » svchost.exe - Win32/Adware.SRNG application
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » drone.exe » NSIS » explorer.exe - a variant of Win32/IRCBot.VP trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » my_70145.exe - Win32/TrojanDownloader.Small.GMC trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » fepsexnow.exe - a variant of Win32/TrojanClicker.Agent.NBI trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » ga.exe » UPX v12_m2 » ZIP » ga.exe - probably a variant of Win32/TrojanDownloader.Flux trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » ga.exe » ZIP » ga.exe - probably a variant of Win32/TrojanDownloader.Flux trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » w3.exe - a variant of Win32/Jalous worm
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » happy.exe - a variant of Win32/PSW.Lineage.ACN trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » smss.exe - probably a variant of Win32/Pacex virus(NewHeur_PE)
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » ie.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » ie2.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » tt1.exe - a variant of Win32/PSW.OnLineGames.NFF trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » orkut.exe - probably a variant of Win32/TrojanDownloader.Banload trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » vip - probably unknown NewHeur_PE virus
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » 0603.exe - Win32/PSW.QQShou trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » webcam.exe - a variant of Win32/Rbot trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » win.exe - Win32/Agent.QT trojan
C:\Documents and Settings\LingHui\桌面\tpack.rar » RAR » hp.exe - probably unknown NewHeur_PE virus

显示全部楼层 · 发表于 2008-1-11 20:42:45

Starting the file scan:
Begin scan in 'F:\病毒样本\tpack.rar'
F:\病毒样本\tpack.rar
  [0] Archive type: RAR
  --> svchost.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/ShopNav.D
  --> drone.exe
   [DETECTION] Contains detection pattern of the dropper DR/VB.apv.5
  --> my_70145.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.gmc
  --> fepsexnow.exe
   [DETECTION] Is the Trojan horse TR/Click.Agen.IP.46
  --> ga.exe
   [DETECTION] Contains detection pattern of the dropper DR/KillAV.GU
   [1] Archive type: ZIP SFX (self extracting)
   --> run.bat
      [DETECTION] Contains detection pattern of the batch virus BAT/Baidu
   --> ga.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   --> kill.bat
      [DETECTION] Contains detection pattern of the batch virus BAT/KillAV.EF
   --> kill.vbs
      [DETECTION] Contains detection pattern of the VBS script virus VBS/Runner.AA
   --> knlps.exe
      [DETECTION] Contains detection pattern of the SPR/PsKill.N program
  --> w3.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> happy.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> smss.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> ie.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> ie2.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> tt1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.bqz
  --> orkut.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Banload.bza
  --> setup.exe
   [DETECTION] Contains detection pattern of the dropper DR/BHO.aop
  --> vip
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.SU
  --> 0603.exe
   [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
  --> webcam.exe
   [DETECTION] Contains detection pattern of the worm WORM/Rbot.Gen
  --> win.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agen.QT.3
  --> hp.exe
   [DETECTION] Is the Trojan horse TR/StartPage.CWL
   [INFO]    The file was moved to '47e864b1.qua'!

End of the scan: 2008年1月11日  20:42
Used time: 00:03 min
The scan has been done completely.
   0 Scanning directories
   26 Files were scanned
   23 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   2 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-11 20:52:56

9个???

[病毒样本] 19个

本帖子中包含更多资源

22

41/17

本帖子中包含更多资源

本帖子中包含更多资源

回复 5楼 garyyan456 的帖子

本帖子中包含更多资源