小瓢虫病毒样本（恶性病毒！感染exe程序）

Palkia

C:\Documents and Settings\Administrator\桌面\小瓢虫病毒样本（恶性病毒！感染exe程序）.rar>>52.exe        TrojanDownloader.VB.lg.orjg        木马        还未处理

wangfeng66

C:\小瓢虫病毒样本（恶性病毒！感染exe程序）.rar\52.exe - infected with Trojan.DownLoader.38313

Archive contains an infected item

DRWEB 4.44

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.VB.yth      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.29.12

scottxzt

A-Squared  Trojan-Downloader.Win32.VB.lg gefunden  
AntiVir  TR/Crypt.FKM.Gen gefunden  
ArcaVir  Trojan.Downloader.Vb.Lg gefunden  
Avast  Win32:VB-GLM gefunden  
AVG Antivirus  Downloader.Generic6.YBC gefunden  
BitDefender  Generic.Malware.SP!DWYBVdTk.5A07877B gefunden  
ClamAV  Trojan.Downloader-18018 gefunden  
CPsecure  Keine Viren gefunden
Dr.Web  Trojan.DownLoader.38313 gefunden  
F-Prot Antivirus  Keine Viren gefunden
F-Secure Anti-Virus  Trojan-Downloader.Win32.VB.lg gefunden  
Fortinet  W32/VB.LG!tr.dldr gefunden  
Ikarus  Backdoor.Win32.Agent.ahj gefunden  
Kaspersky Anti-Virus  Trojan-Downloader.Win32.VB.lg gefunden  
NOD32  probably unknown NewHeur_PE gefunden (mögliche Variante)  
Norman Virus Control  Keine Viren gefunden
Panda Antivirus  Keine Viren gefunden
Rising Antivirus  Keine Viren gefunden
Sophos Antivirus  Mal/VB-G gefunden  
VirusBuster  Trojan.DL.VB.AAYW gefunden  
VBA32  Trojan-Downloader.Win32.VB.lg gefunden

alexeiboy

这个怕怕啊

冷冷

XXX\machine\software\microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL 下的值都给删除了，工具→文件夹选项没有了，不能显示隐藏文件！具有AUTO病毒的特性，
修改system.ini 和win.ini 。













[ 本帖最后由 冷_冷 于 2008-1-30 13:22 编辑 ]

su-tt

Begin scan in 'C:\Documents and Settings\Administrator\桌面\小瓢虫病毒样本（恶性病毒！感染exe程序）.rar'
C:\Documents and Settings\Administrator\桌面\小瓢虫病毒样本（恶性病毒！感染exe程序）.rar
  [0] Archive type: RAR
  --> 52.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年1月30日  14:18
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

ballakay

Scanning Report
30 January 2008 18:33:01 - 18:33:03
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\Сư³æ²¡¶¾Ñù±¾£¨¶ñÐÔ²¡¶¾£¡¸ÐȾexe³ÌÐò£©.rar


--------------------------------------------------------------------------------

Result: 1 malware found
Trojan-Downloader.Win32.VB.lg (virus)
C:\Users\Administrator\Desktop\Сư³æ²¡¶¾Ñù±¾£¨¶ñÐÔ²¡¶¾£¡¸ÐȾexe³ÌÐò£©.rar\52.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 2
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-30_06
Spyware: 2008-01-30_05
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-30
F-Secure Libra: 2.04.01, 2008-01-29
F-Secure Orion: 1.02.37, 2008-01-30
F-Secure Draco: 1.00.35, 2008-01-28
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

gho

扫描报告
2008年1月30日 18:40:17 - 18:40:19
计算机名称: CN-89FF4B9EA4D6
扫描类型: 扫描目标
目标: E:\Documents and Settings\Administrator\桌面\52.exe


--------------------------------------------------------------------------------

结果: 找到 1 恶意软件
Trojan-Downloader.Win32.VB.lg (病毒)
E:\Documents and Settings\Administrator\桌面\52.exe 操作: 已重命名

gho

扫描报告
2008年1月30日 18:41:54 - 18:41:54
计算机名称: CN-89FF4B9EA4D6
扫描类型: 扫描目标
目标: I:\hanxiaojun\SAMPLE-20.rar


--------------------------------------------------------------------------------

结果
找不到恶意软件




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 7
未扫描: 0
结果:
病毒: 0
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0


--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2008-01-30_06
间谍软件: 2008-01-30_05
扫描引擎:
F-Secure Orion: 1.02.37, 2008-01-30
F-Secure Libra: 2.04.01, 2008-01-29
F-Secure AVP: 7.00.171, 2008-01-30
F-Secure Draco: 1.00.35, 2008-01-28
扫描选项:
扫描定义的文件: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问