机器狗病毒自动下载的病毒

显示全部楼层 · 发表于 2008-2-3 14:10:22

机器狗病毒自动下载的病毒

显示全部楼层 · 发表于 2008-2-3 14:18:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\机器狗病毒自动下载的病毒.rar'
C:\Documents and Settings\Administrator\My Documents\
  机器狗病毒自动下载的病毒.rar
  机器狗病毒自动下载的病毒.rar:Zone.Identifier
[0] Archive type: RAR
--> oydiexc.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> _uninsep.bat
--> lssass.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ccavblx.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> verclsids.exe
--> wjlarbn.inf
--> autorun.inf
      [WARNING] The file was ignored!

End of the scan: 2008年2月2日  22:18
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   9 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   1 Archives were scanned
   4 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-3 14:19:57

信息 2008-02-03  14:19:46 您此次查毒共查出3个病毒以及危险代码
信息 2008-02-03  14:19:46 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件11个
信息 2008-02-03  14:19:46 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-02-03  14:19:46 C:\Users\挪威的冬天\Desktop\机器狗病毒自动下载的病毒.rar\ccavblx.exe Win32.Troj.Poseidon.xx.139264 跳过，未处理
病毒 2008-02-03  14:19:46 C:\Users\挪威的冬天\Desktop\机器狗病毒自动下载的病毒.rar\lssass.exe Win32.Troj.MacDog.us.65536 跳过，未处理
病毒 2008-02-03  14:19:46 C:\Users\挪威的冬天\Desktop\机器狗病毒自动下载的病毒.rar\oydiexc.exe Win32.Troj.Poseidon.xx.139264 跳过，未处理

显示全部楼层 · 发表于 2008-2-3 14:21:14

IK
I:\virus\机器狗病毒自动下载的病毒.rar:\oydiexc.exe - Signature 'Virus.Win32.AutoRun.mv' found
I:\virus\机器狗病毒自动下载的病毒.rar:\_uninsep.bat
I:\virus\机器狗病毒自动下载的病毒.rar:\lssass.exe - Signature 'Trojan-Downloader.Win32.Agent.iaj' found
I:\virus\机器狗病毒自动下载的病毒.rar:\ccavblx.exe - Signature 'Virus.Win32.AutoRun.mv' found
I:\virus\机器狗病毒自动下载的病毒.rar:\verclsids.exe
I:\virus\机器狗病毒自动下载的病毒.rar:\wjlarbn.inf
I:\virus\机器狗病毒自动下载的病毒.rar:\autorun.inf
I:\virus\机器狗病毒自动下载的病毒.rar
8 Files scanned
(1 Archiv with 7 files)
3 Signatures found
0 Suspect code-parts found
Used time: 0:05.062
----------------------------------------------------------------
ClamAV

I:\virus\test/ccavblx.exe: Trojan.Downloader-16297 FOUND
I:\virus\test/lssass.exe: PUA.Packed.UPack-2 FOUND
I:\virus\test/oydiexc.exe: Trojan.Downloader-16297 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 202764
Engine version: 0.92
Scanned directories: 1
Scanned files: 7
Infected files: 3
Data scanned: 0.07 MB
Time: 6.062 sec (0 m 6 s)

显示全部楼层 · 发表于 2008-2-3 14:21:19

avast......2

显示全部楼层 · 发表于 2008-2-3 14:22:13

木马名称:Trojan-Downloader.Win32.Losabel.t

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\OYDIEXC.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Agent.pfo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\LSSASS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-2-3 14:23:42

File ID  Filename  Size (Byte) Result
3656022  wjlarbn.inf  169 Byte  CLEAN
126323  verclsids.exe  20.77 KB  KNOWN CLEAN
3656022  wjlarbn.inf  169 Byte  CLEAN
3719280  _uninsep.bat  148 Byte  UNDER ANALYSIS

显示全部楼层 · 发表于 2008-2-3 14:24:58

费尔，两个病毒，三个木马

显示全部楼层 · 发表于 2008-2-3 14:29:48

咖啡个人 4

显示全部楼层 · 发表于 2008-2-3 14:50:41

Found [  WORM_NSPACK.AG]( 1) in D:\Download\S\oydiexc.exe
Undet [             ](    ) in D:\Download\S\_uninsep.bat
Found [Possible_TrojLGR]( 1) in D:\Download\S\lssass.exe
Found [  WORM_NSPACK.AG]( 1) in D:\Download\S\ccavblx.exe
Undet [             ](    ) in D:\Download\S\verclsids.exe
Found [Possible_Otorun2]( 1) in D:\Download\S\wjlarbn.inf
Found [Possible_Otorun2]( 1) in D:\Download\S\autorun.inf

5

[病毒样本] 机器狗病毒自动下载的病毒

本帖子中包含更多资源