16个

显示全部楼层 · 发表于 2008-3-28 20:24:51

C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » apcdli.sys - Win32/Adware.Cinmus application
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » bho.dll - probably a variant of Win32/TrojanDownloader.Agent trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » ad.exe » NSIS » suad.exe - Win32/TrojanDownloader.Small.IED trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » ad7291.exe » NSIS » cpush.dll - Win32/Adware.Cinmus application
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » ad7291.exe » NSIS » Uninst.exe - Win32/Adware.Cinmus application
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » dodolook446.exe » NSIS » 08.exe - Win32/Adware.Cinmus application
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » wr-1-565.exe - a variant of Win32/TrojanDownloader.Small.IAW trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » 17PHolmes565.exe - Win32/TrojanDownloader.Agent.BLS trojan

显示全部楼层 · 发表于 2008-3-28 20:26:22

11
C:\Documents and Settings\Administrator\桌面\样本.rar>>17PHolmes565.exe TrojanDownloader.Homles.at.glcm 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>60001s.exe TrojanDownloader.Agent.lyi.yvqn 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>60001_lh.exe TrojanDownloader.Agent.adkk.qevv 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>ad.exe TrojanDropper.Uwfvtb.bvjj.arc 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>ad7291.exe Adware.BHO.aai.nchi.arc 广告程序还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>apcdli.sys Adware.Cinmus.axta 广告程序还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>bho.dll TrojanDownloader.Agent.fgh.zrju.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>ctfmon.exe TrojanDownloader.Delf.dkq.apso 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>dodolook446.exe RootKit.Apcdli.a.lwes.arc 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>svchost.exe TrojanDownloader.Delf.fto.jzqj 木马还未处理
C:\Documents and Settings\Administrator\桌面\样本.rar>>wr-1-565.exe TrojanDownloader.Small.tei.jfzq 木马还未处理

显示全部楼层 · 发表于 2008-3-28 20:31:09

[Found downloader] <W32/Downldr2.AJBF (exact)> C:\test\样本\bho.dll
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\样本\60001_lh.exe->(embedded)->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\样本\60001s.exe->(UPack)
[Found downloader] <W32/Banload.E.gen!Eldorado (not disinfectable, generic)> C:\test\样本\ctfmon.exe
[Found downloader] <W32/Banload.B.gen!Eldorado (not disinfectable, generic)> C:\test\样本\svchost.exe

显示全部楼层 · 发表于 2008-3-28 20:41:08

IKARUS
17 Files scanned
(1 Archiv with 16 files)
8 Signatures found
1 Suspect code-part found
Used time: 0:04.703

显示全部楼层 · 发表于 2008-3-28 20:52:32

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： RootKit.Win32.Apcdli.a
病毒： AdWare.Win32.Agent.zih
病毒： Trojan.Win32.Undef.eeu
病毒： Trojan.Win32.Undef.eeu
病毒： Trojan.DL.Win32.Undef.fn
病毒： Trojan.DL.Win32.Mnless.xe

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

显示全部楼层 · 发表于 2008-3-28 20:56:01

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> apcdli.sys
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> bho.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.fgh
  --> 60001_lh.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
  --> ad.exe
   [DETECTION] Contains detection pattern of the dropper DR/Dldr.Small.ied
  --> ad7291.exe
   [DETECTION] Contains detection pattern of the dropper DR/BHO.aai.15
  --> wr-1-565.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 17PHolmes565.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 60001s.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> ctfmon.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.dkq
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
   [INFO]    The file was deleted!

End of the scan: 星期五 2008年3月28日  20:57
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   18 Files were scanned
   9 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   9 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-28 20:59:21

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.Apcdli.a
病毒： AdWare.Win32.Agent.zih
病毒： Trojan.Win32.Undef.eeu
病毒： Trojan.Win32.Undef.eeu
病毒： Trojan.DL.Win32.Undef.fn
病毒： Trojan.DL.Win32.Mnless.xe

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.42

显示全部楼层 · 发表于 2008-3-28 22:05:05

9 to kl

detected: Trojan program Trojan-Downloader.Win32.Agent.fgh File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/bho.dll//ASPack
detected: Trojan program Trojan-Downloader.Win32.Delf.fto File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/60001_lh.exe//#//ASPack
detected: Trojan program Trojan-Downloader.Win32.Small.ied File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/ad.exe//stream//data0001
detected: adware not-a-virus:AdWare.Win32.BHO.aai File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/ad7291.exe//stream//data0001
detected: Trojan program Trojan-Downloader.Win32.Small.tei File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/wr-1-565.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Downloader.Win32.Homles.at File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/17PHolmes565.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Downloader.Win32.Agent.lyi File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/60001s.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Delf.dkq File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/ctfmon.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.fto File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/svchost.exe//ASPack

显示全部楼层 · 发表于 2008-3-28 23:12:31

11，上报

[病毒样本] 16个

本帖子中包含更多资源

8

31/10

31/10

本帖子中包含更多资源