一小包

显示全部楼层 · 发表于 2008-2-29 14:36:33

诺顿1个

显示全部楼层 · 发表于 2008-2-29 16:19:23

Roboon：已删除: 木马程序 Trojan-Downloader.Win32.Small.ied 文件: D:\Documents\桌面\0034 - 复制.rar/0034\ad.exe//stream//data0001
已删除: 广告软件 not-a-virus:AdWare.Win32.BHO.aai 文件: D:\Documents\桌面\0034 - 复制.rar/0034\ad7291.exe//stream//data0001
已删除: 广告软件 not-a-virus:AdWare.Win32.Virtumonde.gen 文件: D:\Documents\桌面\0034 - 复制.rar/0034\is150018.exe
已删除: 木马程序 Trojan-Downloader.Win32.Small.irm 文件: D:\Documents\桌面\0034 - 复制.rar/0034\wr-1-565.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2008-2-29 18:02:48

AVG，6个~~

显示全部楼层 · 发表于 2008-2-29 19:43:52

[Scanning : C:\Virus]

C:\Virus\0034.rar<RAR>:ad7291.exe<NSIS>:cpush.dll <- Adware.Bho.Aai : No action
C:\Virus\0034.rar<RAR>:is150018.exe <- Adware.Virtumonde.Gen.52217.MX : No action

Scanned objects : 16

Infected objects : 2

显示全部楼层 · 发表于 2008-2-29 19:44:18

FP6 nothing found!

显示全部楼层 · 发表于 2008-2-29 20:10:14

检测到：木马程序 Trojan-Downloader.Win32.Small.ied URL: http://bbs.kafan.cn/attachment.p ... e//stream//data0001

显示全部楼层 · 发表于 2008-2-29 22:07:11

Trojan.Win32.Undef.dkv

显示全部楼层 · 发表于 2008-3-1 00:54:07

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\0034.rar'
C:\Documents and Settings\Administrator\桌面\0034.rar
  [0] Archive type: RAR
  --> 0034\ad.exe
   [DETECTION] Contains detection pattern of the dropper DR/Dldr.Small.ied
  --> 0034\ad7291.exe
   [DETECTION] Contains detection pattern of the dropper DR/BHO.aai.15
  --> 0034\adv579.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.itf
  --> 0034\dodolook446.exe
   [DETECTION] Contains detection pattern of the dropper DR/Dldr.Small.itg
  --> 0034\Feb2008.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.20480
  --> 0034\is150018.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.52224
  --> 0034\my_70229.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> 0034\wr-1-565.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was deleted!

End of the scan: 星期六 2008年3月1日  00:54
Used time: 00:08 min

The scan has been done completely.

   0 Scanning directories
   11 Files were scanned
   8 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:

显示全部楼层 · 发表于 2008-3-1 12:58:53

金山油一次无动于衷

显示全部楼层 · 发表于 2008-3-1 16:46:33

Scan Log
Version of virus signature database: 2913 (20080301)
Date: 2008-03-01 Time: 16:46:09
Scanned disks, folders and files: C:\Documents and Settings\GUNDAM\桌面\0034.rar
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\ad.exe » NSIS » suad.exe - Win32/TrojanDownloader.Small.IED trojan
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\ad7291.exe » NSIS » cpush.dll - Win32/Adware.Cinmus application
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\ad7291.exe » NSIS » Uninst.exe - Win32/Adware.Cinmus application
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\adv579.exe - Win32/TrojanDownloader.Small.OAJ trojan
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\dodolook446.exe » NSIS » 06.exe - Win32/Adware.Cinmus application
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\Feb2008.exe - Win32/TrojanDownloader.Agent.NWC trojan
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\is150018.exe - Win32/Adware.Virtumonde application
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\my_70229.exe - Win32/TrojanDownloader.QQHelper.NEV trojan
C:\Documents and Settings\GUNDAM\桌面\0034.rar » RAR » 0034\wr-1-565.exe - a variant of Win32/TrojanDownloader.Small.IAW trojan
Number of scanned objects: 17
Number of threats found: 9
Time of completion: 16:46:09 Total scanning time: 0 sec (00:00:00)

删完剩个ini

[ 本帖最后由 leonfg 于 2008-3-1 16:49 编辑 ]

[病毒样本] 一小包

本帖子中包含更多资源

19/1

本帖子中包含更多资源