楼主: qianwenxiang
收起左侧

[病毒样本] 8个

[复制链接]
挪威的冬天
发表于 2008-2-2 18:53:41 | 显示全部楼层
信息        2008-02-02  18:53:22        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-02-02  18:53:22        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件9个                       
信息        2008-02-02  18:53:22        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-02-02  18:53:22        C:\Users\挪威的冬天\Desktop\DRIVERS.RAR\runtime.sys        Win32.TrojDownloader.Agent.5504        跳过,未处理       
病毒        2008-02-02  18:53:22        C:\Users\挪威的冬天\Desktop\DRIVERS.RAR\pcihdd.sys        Win32.Troj.Agent.dz.6768        跳过,未处理
Graybird
发表于 2008-2-2 18:56:41 | 显示全部楼层

回复 3楼 Graybird 的帖子

The file 'NSDriver.sys' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Lawasoft Ad-Aware Free 7.0.2.5'.

The file 'hidusb.sys' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

The file 'mouhid.sys' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

The file 'NMnt.sys' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP2)'.

KAVSafe.sys没报~ 上报~
红心王子
发表于 2008-2-2 19:00:53 | 显示全部楼层
木马名称:Trojan-Downloader.Win32.Agent.jzd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3\PCIHDD.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Rootkit.Win32.Runtime.e

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3\RUNTIME.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?
Palkia
发表于 2008-2-2 20:21:34 | 显示全部楼层
Virus Scan Report

File(s) cleaned:

     File: RootKit.Win32.Paice.a   
     File: Trojan.DL.Win32.Agent.dpe
     File: Trojan.Proxy.Win32.Agent.nu

MAC Address: 00:17:31:40:A3:57

Source:LAN

Version: 20.29.52
sam.to
发表于 2008-2-2 20:26:42 | 显示全部楼层
Hello,

hidusb.sys, KAVSafe.sys, mouhid.sys, NMnt.sys, NSDriver.sys, Vbshell.tlb, ~GLH0001.tmp_, ~GLH0003.tmp_, conf.dat, stdole2.tlb, ~GLH000c.tmp_, emhbquvkk.exe.hiv, Sy_Win7k.Jmp

No malicious code were found in these files.

hocnuninstall.exe_, ~GLH0006.tmp_ - Trojan-Downloader.Win32.VB.clp,
DbgHlp32.dlL - Trojan-PSW.Win32.OnLineGames.qjh,
LotusHlp.dll - Trojan-PSW.Win32.OnLineGames.qje,
SHAProc.dll - Trojan-PSW.Win32.OnLineGames.qjg,
WinForm.dll - Trojan-PSW.Win32.OnLineGames.qjf

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

~GLH000d.tmp_

This file is corrupted.

DbgHlp32.exe_ - Trojan.Win32.Vaklik.hb,
LotusHlp.exe_ - Trojan.Win32.Vaklik.hc,
PTSShell.exe_ - Trojan-PSW.Win32.Nilage.bxx,
SHAProc.exe_ - Trojan.Win32.Vaklik.ig,
upxdnd.exe_ - Trojan-PSW.Win32.OnLineGames.qfw,
WinForm.exe_ - Trojan.Win32.Vaklik.gz

These files are already detected. Please update your antivirus bases.

Please quote all when answering.
wangjay1980
发表于 2008-2-2 20:32:11 | 显示全部楼层
原帖由 kato9096 于 2008-2-2 20:26 发表
Hello,

hidusb.sys, KAVSafe.sys, mouhid.sys, NMnt.sys, NSDriver.sys, Vbshell.tlb, ~GLH0001.tmp_, ~GLH0003.tmp_, conf.dat, stdole2.tlb, ~GLH000c.tmp_, emhbquvkk.exe.hiv, Sy_Win7k.Jmp

No maliciou ...



haha你都报了,俺就省劲了
woai_jolin
发表于 2008-2-2 21:06:52 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
hj5abc
发表于 2008-2-2 21:09:48 | 显示全部楼层
Win32:Agent-LSI [Trj]  

Win32:Agent-MEB [Trj]


Win32:Nulprot-B [Trj]
leonfg
发表于 2008-2-2 21:23:59 | 显示全部楼层
ESET  3
C:\Documents and Settings\GUNDAM\桌面\DRIVERS.RAR » RAR » pcihdd.sys - Win32/TrojanDownloader.Small.HLV trojan
C:\Documents and Settings\GUNDAM\桌面\DRIVERS.RAR » RAR » runtime.sys - Win32/Rootkit.Agent.NDF trojan
C:\Documents and Settings\GUNDAM\桌面\DRIVERS.RAR » RAR » nod32drv.sys - a variant of Win32/Nulprot.A worm

蜘蛛一样
killloop
发表于 2008-2-2 21:42:48 | 显示全部楼层
江民2
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-18 09:48 , Processed in 0.099084 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表