磁碟机 B3DE6E

显示全部楼层 · 发表于 2008-2-24 14:28:16

测测

显示全部楼层 · 发表于 2008-2-24 14:30:29

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Nilage.caf 檔案: C:\Documents and Settings\kato9096\桌面\1.rar/tiggle.com//data.rar/桌面.exe//data.rar/av.exe

显示全部楼层 · 发表于 2008-2-24 14:34:59

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\1.rar'
C:\Documents and Settings\Administrator\My Documents\
  1.rar
[0] Archive type: RAR
--> 1.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
   --> tiggle.com
      [1] Archive type: RAR SFX (self extracting)
      --> ﾮ￠ﾭﾱ.exe
      [2] Archive type: RAR SFX (self extracting)
      --> ﾹqﾱ￨ﾾ￣ﾤH.TXT
      --> av.exe
         [3] Archive type: RSRC
         --> Object
      --> ﾹqﾱ￨ﾾ￣ﾤH.TXT
   --> setup.exe
      [1] Archive type: Runtime Packed
      --> Object
      --> Setup.exe
      [2] Archive type: Runtime Packed
      --> Object
   --> Xorer.exe
      [1] Archive type: Runtime Packed
      --> Object
   [WARNING] The file was ignored!
  1.rar:Zone.Identifier

End of the scan: 2008年2月23日  22:34
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   11 Files were scanned
   0 viruses and/or unwanted programs were found
   2 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   11 Files not concerned
   4 Archives were scanned
   2 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-24 15:09:37

胡乱贴图，根本不是磁碟机

显示全部楼层 · 发表于 2008-2-24 15:11:11

是个PSW trojan

显示全部楼层 · 发表于 2008-2-24 15:15:03

Scan Log
Version of virus signature database: 2898 (20080223)
Date: 2008/2/24 Time: 15:13:50
Scanned disks, folders and files: G:\v\1.rar
G:\v\1.rar » RAR » 1.exe - a variant of Win32/TrojanDownloader.Adload.NEW trojan - was a part of the deleted object
G:\v\1.rar » RAR » tiggle.com » RAR » ??.exe » RAR » 筿辫俱?.TXT - is OK
G:\v\1.rar » RAR » tiggle.com » RAR » ??.exe » RAR » av.exe - a variant of Win32/PSW.Lineage.ACN trojan - was a part of the deleted object
G:\v\1.rar » RAR » tiggle.com » RAR » 筿辫俱?.TXT - is OK
G:\v\1.rar » RAR » setup.exe » UPX v12_m2 » RAR » Setup.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\1.rar » RAR » setup.exe » RAR » Setup.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\1.rar » RAR » Xorer.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
Number of scanned objects: 12
Number of threats found: 5
Time of completion: 15:13:55 Total scanning time: 5 sec (00:00:05)

显示全部楼层 · 发表于 2008-2-24 15:22:39

扫描

显示全部楼层 · 发表于 2008-2-24 15:24:40

可能是包里包着的，只是卡巴只认出其中的一个，谁给解包一下

显示全部楼层 · 发表于 2008-2-24 15:50:10

C:\Documents and Settings\Administrator\桌面\1.rar>RAR>1.exe - Win32/TrojanDownloader.Adload.NEW 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1.rar>RAR>tiggle.com>RAR>??.exe>RAR>av.exe - Win32/PSW.Lineage.ACN 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1.rar>RAR>setup.exe>UPX v12_m2>RAR>Setup.exe - 可能是 Win32/Genetik 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1.rar>RAR>setup.exe>RAR>Setup.exe - 可能是 Win32/Genetik 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1.rar>RAR>Xorer.exe - 可能是 Win32/Genetik 特洛伊木马的变种

显示全部楼层 · 发表于 2008-2-24 16:27:59

3

Sign of "Win32:Xorer-G" has been found in "F:\1.rar\Xorer.exe\[UPX]" file.
Sign of "Win32:Xorer-G" has been found in "F:\1.rar\setup.exe\Setup.exe\[UPX]" file.
Sign of "Win32:Baidubar-B [Trj]" has been found in "F:\1.rar\1.exe\[PECompact]\[Embedded#1]" file.

[病毒样本] 磁碟机 B3DE6E

本帖子中包含更多资源

回复 4楼 wangjay1980 的帖子

本帖子中包含更多资源