三个IGM病毒，只能查出两个

显示全部楼层 · 发表于 2008-1-20 10:57:13

detected: virus Worm.Win32.Downloader.av URL: http://bbs.kafan.cn/attachment.php?aid=186635//userinitµÚ¶þ¸ö±äÖÖ.exe

显示全部楼层 · 发表于 2008-1-20 12:09:49

对象: userinit第一个变种.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\igm样本及变种.rar
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.blm (KAV 引擎)
对象: userinit第二个变种.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\igm样本及变种.rar
Status: 已发现病毒
病毒: Worm.Win32.Downloader.av (KAV 引擎)
对象: userinit??????????.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\igm样本及变种.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Agent.YMX (BD 引擎)

显示全部楼层 · 发表于 2008-1-20 12:13:04

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.np
病毒： Win32.UIWrapper.a

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.27.60

显示全部楼层 · 发表于 2008-1-20 12:47:49

userinit#####.exe_

No malicious code was found in this file.

看来那个没问题

显示全部楼层 · 发表于 2008-1-20 13:21:43

avast found Win32:Agent-NXS [Trj] and Win32:Downloader-RW [Wrm] and Win32:Downloader-RR [Wrm]

显示全部楼层 · 发表于 2008-1-20 14:30:16

C:\Documents and Settings\GUNDAM\桌面\igm样本及变种.rar » RAR » userinit第一个变种.exe - Win32/TrojanDownloader.Agent.NRU trojan
C:\Documents and Settings\GUNDAM\桌面\igm样本及变种.rar » RAR » userinit第二个变种.exe - Win32/Jalous.M worm

显示全部楼层 · 发表于 2008-1-20 15:02:05

Scanning Report
20 January 2008 15:01:16 - 15:01:19
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\igmÑù±¾¼°±äÖÖ.rar

--------------------------------------------------------------------------------

Result: 2 malware found
Trojan-Downloader.Win32.Agent.blm (virus)
C:\Users\Administrator\Desktop\igmÑù±¾¼°±äÖÖ.rar\userinitµÚÒ»¸ö±äÖÖ.exe
Worm.Win32.Downloader.av (virus)
C:\Users\Administrator\Desktop\igmÑù±¾¼°±äÖÖ.rar\userinitµÚ¶þ¸ö±äÖÖ.exe

--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 4
Not scanned: 0
Result:
Viruses: 2
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0

--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-19_02
Spyware: 2008-01-19_01
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-19
F-Secure Libra: 2.04.01, 2008-01-18
F-Secure Orion: 1.02.37, 2008-01-19
F-Secure Draco: 1.00.35, 2007-11-28
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

[病毒样本] 三个IGM病毒，只能查出两个

5/2