[病毒样本] 6x

显示全部楼层 · 发表于 2008-3-24 21:11:05

avast
Win32:Dialer-gen [Trj] ProWeb016.ocx

Win32:Harnig-OT [Trj] 64.exe

显示全部楼层 · 发表于 2008-3-24 21:13:18

已刪除: 特洛伊木馬程式 Trojan.Win32.Restarter.g 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/unknown@hotmail.com
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Agent.fcu 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/64.exe
已刪除: 特洛伊木馬程式 Trojan.Win32.Small.aap 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/nel.exe//PE_Patch//MEW//PE_Patch//NiceProtect

上报3

显示全部楼层 · 发表于 2008-3-24 21:14:42

Begin scan in 'C:\Documents and Settings\Administrator\桌面\6.rar'
C:\Documents and Settings\Administrator\桌面\6.rar
  [0] Archive type: RAR
  --> unknown@hotmail.com
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> ProWeb016.ocx
   [DETECTION] Contains detection pattern of the dial-up program DIAL/98304.B
  --> 64.exe
   [DETECTION] Contains detection pattern of the dropper DR/MicroJoiner.Gen
  --> nel.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [INFO]    The file was moved to '4859aa10.qua'!

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-24 21:16:25

金山 ZERO

显示全部楼层 · 发表于 2008-3-24 21:25:38

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Diamin.ru
病毒： Trojan.Win32.Undef.cnz

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.02

显示全部楼层 · 发表于 2008-3-24 21:39:10

在 C:\Documents and Settings\Administrator\桌面\6.rar->unknown@hotmail.com 中发现 Trojan/Restarter.a 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\6.rar->nel.exe 中发现 Trojan/Small.djv 病毒, 已删除

显示全部楼层 · 发表于 2008-3-24 21:43:21

[Found backdoor] <W32/Backdoor2.OQN (exact, not disinfectable)> c:\test\6.rar->unknown@hotmail.com
[Found Trojan] <W32/Trojan2.ABZM (exact, not disinfectable)> c:\test\6.rar->nel.exe

显示全部楼层 · 发表于 2008-3-24 21:45:28

D:\firefox download\6.rar > RAR > unknown@hotmail.com - Win32/IRCBot.NAH 特洛伊木马 - 是已删除对象的一部分
D:\firefox download\6.rar > RAR > ProWeb016.ocx - 正常
D:\firefox download\6.rar > RAR > 64.exe - Win32/PSW.Agent.NHG 特洛伊木马 - 是已删除对象的一部分
D:\firefox download\6.rar > RAR > nel.exe - 可能是 Win32/TrojanDownloader.Small.NZM 特洛伊木马的变种 - 是已删除对象的一部分
D:\firefox download\6.rar > RAR > fs2008_install.exe - 正常
D:\firefox download\6.rar > RAR > ldr.exe - 正常
D:\firefox download\6.rar - 多个威胁 - 已删除 - 已隔离

显示全部楼层 · 发表于 2008-3-24 21:50:08

趋势隔离三个

显示全部楼层 · 发表于 2008-3-24 21:51:20

E:\VIRUS\6（24）.rar>>unknown@hotmail.com Trojan.Restarter.g.nfxy 木马还未处理
E:\VIRUS\6（24）.rar>>ProWeb016.ocx Trojan.Diamin.ru.dswr.dll 木马还未处理
E:\VIRUS\6（24）.rar>>64.exe TrojanDropper.Agent.NIK.cgob 木马还未处理

[病毒样本] 6x

本帖子中包含更多资源

7/2

KV