6個，僵屍1

醉一生爱妍

NOD KILL 4 MISS 2

其中2008.exe是很猛的一個。。。

樣本以及生成物下載地址http://garyyan456.ys168.com/

請進入樣本區進行下載，桌面。RAR是病毒樣本 其余為生成物

醉一生爱妍

[ 本帖最后由 garyyan456 于 2008-1-25 22:06 编辑 ]

Palkia

在这里发啊~晕~

qigang

上传！不知道对不对！

qigang

45/6

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.RESSDT .b  
病毒： Malicious Code           
病毒： AdWare.Win32.Agent.zpz   
病毒： Trojan.IMMSG.Win32.MsgSender.am

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.42

wjzdw

桌面.rar

4个

                瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： RootKit.Win32.RESSDT .b  
病毒： Malicious Code           
病毒： AdWare.Win32.Agent.zpz   
病毒： Trojan.IMMSG.Win32.MsgSender.am

MAC 地址：00:11:D8:2A:98:47

用户来源：局域网

软件版本：20.28.42

醉一生爱妍

2008也夠猛的

Graybird

Starting the file scan:

Begin scan in 'E:\virus1.rar'
E:\virus1.rar
  [0] Archive type: RAR
  --> system32\taskmgre.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Sma.dat.4.B
      [WARNING]   The file was ignored!
Begin scan in 'E:\virus2.rar'
E:\virus2.rar
  [0] Archive type: RAR
  --> Temp\1.bat
      [DETECTION] Contains detection pattern of the HTML script virus HTML/ADODB.Exploit.Gen
  --> Temp\1.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.6912
  --> Temp\guai.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.cpj.4 Backdoor server programs
      [WARNING]   The file was ignored!
Begin scan in 'E:\virus3.rar'
E:\virus3.rar
  [0] Archive type: RAR
  --> virus3\2008.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.283010
  --> virus3\AIO.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/Expressor). Please verify the origin of the file
  --> virus3\baidu.exe
      [DETECTION] Contains detection pattern of the worm WORM/Delf.O.8
  --> virus3\dj.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Sma.dat.4.B
  --> virus3\File3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> virus3\guai.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.cpj.4 Backdoor server programs
  --> virus3\ht2.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.vzw Backdoor server programs
      [WARNING]   The file was ignored!


End of the scan: 2008年1月25日  22:09
Used time: 00:22 min

The scan has been done completely.

      0 Scanning directories
     27 Files were scanned
     10 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     17 Files not concerned
      3 Archives were scanned
      3 Warnings
      0 Notes

Palkia

C:\Documents and Settings\Administrator\桌面\virus3.rar ?RAR ?virus3\AIO.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus3.rar ?RAR ?virus3\baidu.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus3.rar ?RAR ?virus3\File3.exe - Win32/Wigon.AM 特洛伊木马
C:\Documents and Settings\Administrator\桌面\virus3.rar ?RAR ?virus3\ht2.exe - 可能是 Win32/Spy.Delf.PG 特洛伊木马 的变种

我爱舒畅

木马名称:Backdoor.Win32.Agent.fqp

程序:
C:\DOCUMENTS AND SETTINGS\SHUCHANG\LOCAL SETTINGS\TEMP\TWIEX0\TEMP\GUAI.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?