Win32:VB-CRG

显示全部楼层 · 发表于 2008-2-28 22:54:42

detected: Trojan program Backdoor.Win32.VB.apv URL: http://bbs.kafan.cn/attachment.p ... e//stream//data0001
detected: Trojan program Backdoor.Win32.VB.apv URL: http://bbs.kafan.cn/attachment.php?aid=209919//svchost.exe

[ 本帖最后由 wangjay1980 于 2008-2-28 23:04 编辑 ]

显示全部楼层 · 发表于 2008-2-28 22:55:15

Starting the file scan:

Begin scan in 'D:\Documents and Settings\zyy\桌面\Drone.rar'
D:\Documents and Settings\zyy\桌面\Drone.rar
  [0] Archive type: RAR
  --> drone.exe
   [DETECTION] Contains detection pattern of the dropper DR/VB.apv.5
  --> svchost.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/VB.apv.9 Backdoor server programs
   [INFO]    The file was deleted!

End of the scan: 2008年2月28日  22:55
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   2 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-28 22:55:46

FS结果: 找到 2 恶意软件
Backdoor.Win32.VB.apv (病毒)
D:\Virus\Test\drone.exe 操作: 删除
D:\Virus\Test\svchost.exe 操作: 删除

显示全部楼层 · 发表于 2008-2-28 22:55:49

backdoor/vb.bsp

显示全部楼层 · 发表于 2008-2-28 22:57:25

[Scanning : C:\Test]

C:\Test\Drone.rar<RAR>:drone.exe<NSIS>:explorer.exe <- Trojan.Vb.Apv : No action

Scanned objects : 6

Infected objects : 1

显示全部楼层 · 发表于 2008-2-28 22:57:43

FP6 miss.

显示全部楼层 · 发表于 2008-2-28 23:28:35

E:\病毒\Drone.rar » RAR » drone.exe » NSIS » explorer.exe - a variant of Win32/IRCBot.VP trojan
E:\病毒\Drone.rar » RAR » svchost.exe - a variant of Win32/IRCBot.VP trojan

显示全部楼层 · 发表于 2008-2-28 23:44:40

deleted: Trojan program Backdoor.Win32.VB.apv File: C:\Documents and Settings\swans\×ÀÃæ\Drone.rar/drone.exe//stream//data0001
deleted: Trojan program Backdoor.Win32.VB.apv File: C:\Documents and Settings\swans\×ÀÃæ\Drone.rar/svchost.exe

显示全部楼层 · 发表于 2008-2-29 00:22:18

C:\Documents and Settings\hp\桌面\Drone.rar>>drone.exe Backdoor.VB.apv.fwzx.arc 后门还未处理
C:\Documents and Settings\hp\桌面\Drone.rar>>svchost.exe Backdoor.VB.apv.nstq 后门还未处理

[病毒样本] Win32:VB-CRG

本帖子中包含更多资源