微点砍掉

显示全部楼层 · 发表于 2008-1-26 14:33:58

费尔过，AVK杀之，微点报已知

显示全部楼层 · 发表于 2008-1-26 14:36:15

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\lvrzj.rar'
C:\Documents and Settings\Administrator\桌面\lvrzj.rar
  [0] Archive type: RAR
--> lvrzj.exe
   [1] Archive type: RAR SFX (self extracting)
   --> my_70050.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
   --> u03.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-26 14:36:43

D:\temp\lswqf9ou.rar\lvrzj.exe\u03.exe - infected with Trojan.Hitpop.origin

Archive contains an infected item

显示全部楼层 · 发表于 2008-1-26 14:59:59

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Clicker.Win32.PopHot.gm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.50

显示全部楼层 · 发表于 2008-1-26 15:00:28

江民过～～～～～

显示全部楼层 · 发表于 2008-1-26 15:36:49

Win32:Agent-ICL [Trj] --- F:\lvrzj.rar\lvrzj.exe\u03.exe\[Upack]\[Embedded#DLL]

显示全部楼层 · 发表于 2008-1-26 15:57:25

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\lvrzj.rar'
C:\Documents and Settings\Administrator\My Documents\
  lvrzj.rar
[0] Archive type: RAR
   --> lvrzj.exe
      [1] Archive type: RAR SFX (self extracting)
      --> my_70050.exe
      --> u03.exe
      [2] Archive type: Runtime Packed
      --> Object
         [3] Archive type: RSRC
         --> Object
         --> Object
   [INFO]    The file was deleted!

End of the scan: 2008年1月25日  23:57
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   3 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-26 22:22:59

I:\virus\test\lvrzj.exe:\my_70050.exe
I:\virus\test\lvrzj.exe:\u03.exe - Signature 'Trojan-PWS.Win32.Agent.AN' found
I:\virus\test\lvrzj.exe
3 Files scanned
(1 Archiv with 2 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.094

显示全部楼层 · 发表于 2008-1-26 22:36:02

SSM report:

這個病毒有點猛，不過由於我在下仙4，其下載後我就交給會員冷_冷，幫我TEST了，我只負責下載之前的REPORT

显示全部楼层 · 发表于 2008-1-26 22:43:04

你这小子

---------------------------------------------------
衍生物：

I:\VS\VIRUS\drive\D\WINDOWS\tempaq - Signature 'Virus.Win32.Agent.JQE' found
I:\VS\VIRUS\drive\D\WINDOWS\system\sslxpes080112.exe - Signature 'Trojan-PWS.Win32.Agent.AN' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\e6rgh35.dll - Signature 'Virus.Win32.Agent.JZN' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\lwisys16_080112.dll - Suspect code-parts found (Level: 30)
I:\VS\VIRUS\drive\D\WINDOWS\system32\mwisys32_080112.dll - Signature 'Virus.Win32.Agent.ICL' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\sztqg31ln.dll - Signature 'Virus.Win32.Agent.JZN' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\drivers\68w2t8j9.sys - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\drivers\9wyyq1h.sys - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\drivers\kows6i6w.sys - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\drivers\r435lajwgu.sys - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\inf\scrsys080112.scr - Signature 'Trojan-PWS.Win32.Agent.AN' found
I:\VS\VIRUS\drive\D\WINDOWS\system32\inf\scrsys16_080112.dll - Suspect code-parts found (Level: 30)
I:\VS\VIRUS\drive\I\Temporary Internet Files\Content.IE5\MXVNN9I7\14[1].exe - Signature 'Packed.Win32.Klone.af' found
I:\VS\VIRUS\drive\I\Temporary Internet Files\Content.IE5\X3R4EWD7\14[1].exe - Signature 'Packed.Win32.Klone.af' found
I:\VS\VIRUS\drive\I\Temporary Internet Files\Content.IE5\ZINY37IC\logo[1].jpg - Signature 'Virus.Win32.Agent.JQE' found
I:\VS\VIRUS\drive\I\virus\test\u03.exe - Signature 'Trojan-PWS.Win32.Agent.AN' found
87 Files scanned
(0 Archives with 0 files)
14 Signatures found
2 Suspect code-parts found
Used time: 0:07.547
-------------------------------------------------------------------------------

I:\VS\VIRUS\drive/D/WINDOWS/system/sslxpes080112.exe: Adware.Baidu FOUND
I:\VS\VIRUS\drive/D/WINDOWS/system32/inf/scrsys080112.scr: Adware.Baidu FOUND
I:\VS\VIRUS\drive/D/WINDOWS/system32/inf/scrsys16_080112.dll: Trojan.Spy-20062 FOUND
I:\VS\VIRUS\drive/D/WINDOWS/system32/lwisys16_080112.dll: Trojan.Spy-20062 FOUND
I:\VS\VIRUS\drive/D/WINDOWS/system32/mwisys32_080112.dll: Adware.Baidu FOUND
I:\VS\VIRUS\drive/I/virus/test/u03.exe: Adware.Baidu FOUND
----------- SCAN SUMMARY -----------
Known viruses: 197940
Engine version: 0.92
Scanned directories: 19
Scanned files: 75
Infected files: 6

补充楼上行为:

[ 本帖最后由冷_冷于 2008-1-26 23:12 编辑 ]

[病毒样本] 微点砍掉

本帖子中包含更多资源

5/1

本帖子中包含更多资源

回复 9楼 garyyan456 的帖子

本帖子中包含更多资源

浏览过的版块