[病毒样本] 2

显示全部楼层 · 发表于 2008-2-12 16:04:52

2008-2-12 16:04:57 Real-time file system protection file G:\v\121134499612708948 jpg.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-2-12 16:04:54 Real-time file system protection file G:\v\111134499612708937 jpg.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-2-12 16:05:52

Starting the file scan:

Begin scan in 'E:\virus\Collection.rar'
E:\virus\Collection.rar
  [0] Archive type: RAR
  --> 111134499612708937 jpg.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> 121134499612708948 jpg.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.egd
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-12 16:07:43

FS
结果: 发现2个恶意软件
Backdoor.Win32.Hupigon.ahur (病毒)
C:\Documents and Settings\GUNDAM\桌面\Collection.rar\111134499612708937 jpg.exe
Trojan-Downloader.Win32.Delf.egd (病毒)
C:\Documents and Settings\GUNDAM\桌面\Collection.rar\121134499612708948 jpg.exe

显示全部楼层 · 发表于 2008-2-12 16:10:37

信息 2008-02-12  16:10:31 您此次查毒共查出2个病毒以及危险代码
信息 2008-02-12  16:10:31 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件4个
信息 2008-02-12  16:10:31 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-02-12  16:10:31 C:\Users\挪威的冬天\Desktop\Collection.rar\121134499612708948 jpg.exe Win32.Packed.MaskPE 跳过，未处理
病毒 2008-02-12  16:10:31 C:\Users\挪威的冬天\Desktop\Collection.rar\111134499612708937 jpg.exe Win32.Hack.Huigezi.752640 跳过，未处理

显示全部楼层 · 发表于 2008-2-12 16:13:07

ewido anti-spyware - Scan Report
---------------------------------------------------------

+ 创建时间: 16:17:50 2008-2-12

+ 扫描结果:

C:\Documents and Settings\zh\桌面\Collection.rar/111134499612708937 jpg.exe -> Backdoor.Hupigon.ahur : 未进行操作.

::报告结束

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.RWX.eu
病毒： Trojan.PSW.Win32.QQPass.zch

用户来源：互联网

软件版本：20.31.10

显示全部楼层 · 发表于 2008-2-12 16:35:32

detected: Trojan program Backdoor.Win32.Hupigon.ahur URL: http://bbs.kafan.cn/attachment.php?aid=199403//111134499612708937 jpg.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.egd URL: http://bbs.kafan.cn/attachment.php?aid=199403//121134499612708948 jpg.exe//UPack//PE_Patch.MaskPE

显示全部楼层 · 发表于 2008-2-12 16:58:34

Result: 2 malware found
Backdoor.Win32.Hupigon.ahur (virus)
C:\Documents and Settings\Hatry.FAMILY-10EDEF61\®à±\Collection.rar\111134499612708937 jpg.exe
Trojan-Downloader.Win32.Delf.egd (virus)
C:\Documents and Settings\Hatry.FAMILY-10EDEF61\®à±\Collection.rar\121134499612708948 jpg.exe

显示全部楼层 · 发表于 2008-2-12 18:17:42

发现未知间谍软件，是否删除？
程序:
C:\DOCUMENTS AND SETTINGS\WO\桌面\COLLECTION\121134499612708948 JPG.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否删除木马程序及其衍生物?

发现未知间谍软件，是否删除？
程序:
C:\DOCUMENTS AND SETTINGS\WO\桌面\COLLECTION\111134499612708937 JPG.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\3721.EXE
2) C:\PROGRAM FILES\_3721.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-2-12 19:56:52

另一个死的

[病毒样本] 2

本帖子中包含更多资源

本帖子中包含更多资源