Partie?

显示全部楼层 · 发表于 2008-2-29 18:23:10

avast Win32:Parite
启动后下载：

不过下载的速度太慢，直接关了，没看后续动作了
生成物
avast Win32:Parite-B@dll
附带个昨天Win32:VB-CRG [Trj]的残余物
digital.exe我这儿运行有问题

[ 本帖最后由 qianwenxiang 于 2008-2-29 18:25 编辑 ]

显示全部楼层 · 发表于 2008-2-29 19:08:36

C:\Test\0802\Data29\2000.rar>>cartaovirtual.cmd W32.Parite.b.qwbs 病毒还未处理
C:\Test\0802\Data29\2000.rar>>elc14.tmp W32.Pinfi.Hook 病毒还未处理
C:\Test\0802\Data29\2000.rar>>nsx39.tmp>>emb-0.exe Backdoor.VB.apv.nstq 后门还未处理
C:\Test\0802\Data29\digitalcard.part1.rar>>digitalcard.exe TrojanSpy.Banker.imu.pxrr 木马还未处理

大包包果然不受欢迎。。

显示全部楼层 · 发表于 2008-2-29 19:13:12

来了，来了

C:\Documents and Settings\haha\桌面\2000.rar
  [0] Archive type: RAR
  --> WormList.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> cartaovirtual.cmd
   [DETECTION] Contains code of the Windows virus W32/Parite
  --> elc14.tmp
   [DETECTION] Contains code of the Windows virus W32/Parite.B
   [INFO]    A backup was created as '47f7e908.qua'  ( QUARANTINE )

End of the scan: 2008年2月29日  19:13
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   5 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-29 19:14:22

再来，，刚才在下。

Begin scan in 'C:\Documents and Settings\haha\桌面\新建文件夹'
C:\Documents and Settings\haha\桌面\新建文件夹\digitalcard.exe
[DETECTION] Is the Trojan horse TR/Spy.Banker.imu
[INFO] A backup was created as '482ee989.qua' ( QUARANTINE )

显示全部楼层 · 发表于 2008-2-29 19:35:24

[Found possible virus] <W32/NewMalware-LSU-based!Maximus (not disinfectable)> C:\Virus\2000.rar->WormList.exe->(PecBundle)->(PECompact)
[Found virus] <W32/Parite.B (not disinfectable)> C:\Virus\2000.rar->cartaovirtual.cmd
[Found virus] <W32/Parite.B@mm (exact, not disinfectable)> C:\Virus\2000.rar->elc14.tmp

---------------------------------------------------------------------
Scan ended: 2008-2-29, 20:01:57
Duration: 0:00:01

Scan result:

Scanned files:    8
Infected objects:    3
Disinfected objects:    0
Quarantined files:    0

[ 本帖最后由 allinwonderi 于 2008-2-29 20:03 编辑 ]

显示全部楼层 · 发表于 2008-2-29 20:03:58

[Scanning : C:\Virus]

C:\Virus\2000.rar<RAR>:WormList.exe <- Trojan.Spy.Banker.Cho : No action
C:\Virus\2000.rar<RAR>:cartaovirtual.cmd <- W95.Parite.B : No action
C:\Virus\2000.rar<RAR>:elc14.tmp <- Trojan.Parite.B : No action

Scanned objects : 7

Infected objects : 3

显示全部楼层 · 发表于 2008-2-29 20:06:28

已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Banker.cho 檔案: C:\Documents and Settings\kato9096\桌面\210953.rar/WormList.exe//PE_Patch.PECompact//PecBundle//PECompact
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Banload.hvo 檔案: C:\Documents and Settings\kato9096\桌面\210953.rar/cartaovirtual.cmd
已刪除: 病毒 Virus.Win32.Parite.b 檔案: C:\Documents and Settings\kato9096\桌面\210953.rar/elc14.tmp//UPX
已偵測: 特洛伊木馬程式 Trojan-Spy.Win32.Banker.imu 檔案: C:\Documents and Settings\kato9096\桌面\210953\digitalcard\digitalcard.exe

不报的上报卡巴

[ 本帖最后由 kato9096 于 2008-2-29 20:10 编辑 ]

显示全部楼层 · 发表于 2008-2-29 21:04:44

C:\Documents and Settings\Administrator\桌面\2000.rar > RAR > WormList.exe - Win32/TrojanDownloader.Banload.BAK 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\2000.rar > RAR > elc14.tmp - Win32/Parite.B.packed 病毒

显示全部楼层 · 发表于 2008-2-29 21:32:30

FS结果: 找到 4 恶意软件
Virus.Win32.Parite.b (病毒)
D:\Virus\Test\cartaovirtual.cmd 操作: 删除
D:\Virus\Test\elc14.tmp 操作: 删除
Trojan-Spy.Win32.Banker.imu (病毒)
D:\Virus\Test\digitalcard.exe 操作: 删除
Trojan-Spy.Win32.Banker.cho (病毒)
D:\Virus\Test\WormList.exe 操作: 删除

显示全部楼层 · 发表于 2008-2-29 21:34:08

Scan Log
Version of virus signature database: 2911 (20080229)
Date: 2008-2-29 Time: 21:21:50
Scanned disks, folders and files: E:\病毒\2000.rar
E:\病毒\2000.rar » RAR » WormList.exe - a variant of Win32/TrojanDownloader.Banload.BAK trojan
E:\病毒\2000.rar » RAR » cartaovirtual.cmd - Win32/Parite.B virus
E:\病毒\2000.rar » RAR » elc14.tmp - Win32/Parite.B.packed virus
Number of scanned objects: 4
Number of threats found: 3
Time of completion: 21:21:54 Total scanning time: 4 sec (00:00:04)

[病毒样本] Partie?

本帖子中包含更多资源

2