毒网

显示全部楼层 · 发表于 2008-3-1 00:50:38

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> rl(1).exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
  --> sta.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
  --> 1.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bhw.12 Backdoor server programs
--> Baidu.cab
   [1] Archive type: CAB (Microsoft)
   --> Baidu.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
  --> bak.css
   [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
--> ad.cab
   [1] Archive type: CAB (Microsoft)
   --> bd.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
  --> bf.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
   [INFO]    The file was deleted!

End of the scan: 星期六 2008年3月1日  00:51
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   11 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:

显示全部楼层 · 发表于 2008-3-1 00:56:06

9楼漏了一只：

qvod.exe
Size: 11708 bytes
MD5: B9872DFD25746AA3506922F11C6709D5
SHA1: 64B44A0A21BF1D8FF244D5C7F6DC533C5742DD9C
CRC32: 003B54DB

显示全部楼层 · 发表于 2008-3-1 01:23:16

正在扫描日志
病毒库版本: 2912 (20080229)
日期: 2008-3-1 时间: 1:27:25
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\xxxxxxx\桌面\qvod\qvod.exe
已扫描的对象数: 1
发现的威胁数: 0
完成时间: 1:27:26 总扫描时间: 1 秒 (00:00:01)

[ 本帖最后由 tanlimo 于 2008-3-1 01:26 编辑 ]

显示全部楼层 · 发表于 2008-3-1 01:25:19

这里利用应用程序0day的网马比较多，而你没有安装这些漏洞软件当然就没有反应了

应该都是活的

显示全部楼层 · 发表于 2008-3-1 09:47:11

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\qvod.rar'
C:\Documents and Settings\Administrator\My Documents\
  qvod.rar
[0] Archive type: RAR
   --> qvod.exe
      [1] Archive type: Runtime Packed
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-3-1 09:59:13

谢谢解答了

显示全部楼层 · 发表于 2008-3-1 10:03:30

I:\virus\March\1\virus.rar:\Baidu.cab
I:\virus\March\1\virus.rar:\ad.cab

这两个IK没有K

显示全部楼层 · 发表于 2008-3-1 10:13:02

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Direct.me
病毒： Trojan.Win32.Undef.dkp
病毒： Trojan.DL.Win32.Undef.w
病毒： RootKit.Win32.Mnless.gp

用户来源：互联网

软件版本：20.33.42
7个

显示全部楼层 · 发表于 2008-3-1 10:18:16

nod漏了上面各位给出的3个

显示全部楼层 · 发表于 2008-3-1 10:38:43

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus.rar'
C:\Documents and Settings\Administrator\My Documents\
  virus.rar
[0] Archive type: RAR
   --> rl(1).exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
            [WARNING] Infected files in archives cannot be repaired!
   --> sta.exe
      [1] Archive type: Runtime Packed
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
         [WARNING] Infected files in archives cannot be repaired!
--> 1.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bhw.12 Backdoor server programs
   --> Baidu.cab
      [1] Archive type: CAB (Microsoft)
      --> Baidu.exe
      [2] Archive type: Runtime Packed
      --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
            [WARNING] Infected files in archives cannot be repaired!
   --> bak.css
      [1] Archive type: Runtime Packed
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
         [WARNING] Infected files in archives cannot be repaired!
   --> ad.cab
      [1] Archive type: CAB (Microsoft)
      --> bd.exe
      [2] Archive type: Runtime Packed
      --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
            [WARNING] Infected files in archives cannot be repaired!
   --> bf.exe
      [1] Archive type: Runtime Packed
      --> Object
         [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
         [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!
  virus.rar:Zone.Identifier

End of the scan: 2008年2月29日  18:38
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   11 Files were scanned
   7 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   3 Archives were scanned
   7 Warnings
   0 Notes

[已鉴定] 毒网

回复 5楼冷冷的帖子

回复 14楼 rappar 的帖子

回复 9楼 rappar 的帖子

[已鉴定] 毒网

回复 5楼 冷冷 的帖子

回复 14楼 rappar 的帖子

回复 9楼 rappar 的帖子

回复 5楼冷冷的帖子