[病毒样本] 24x

显示全部楼层 · 发表于 2008-3-29 22:16:45

Starting the file scan:

Begin scan in 'D:\pack2.rar'
D:\pack2.rar
  [0] Archive type: RAR
  --> veja_voce_mesmo.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
  --> video_saddam.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
  --> depoimento.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> SAC1.com
   [DETECTION] Is the Trojan horse TR/Drop.Banload.akc
   [1] Archive type: RAR SFX (self extracting)
   --> svcdll.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banload.bpp.8
  --> rll.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
  --> 014s.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
  --> ogame.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
  --> cmd.exe
   [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
  --> 107.exe
   [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
  --> tk58.exe
   [DETECTION] Is the Trojan horse TR/BHO.AB.4
  --> setup.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> svcos.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.LO
  --> A.exe
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.cfz
  --> ismupd14.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.VU
  --> ismupd24.exe
   [DETECTION] Contains detection pattern of the dropper DR/AdBand.N
  --> ismupd7.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.JN.1
  --> update.exe
   [DETECTION] Is the Trojan horse TR/Agent.33872
  --> foto.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.aro.12
  --> fotos.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> fotoss.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> Foto0.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> Sac.com
   [DETECTION] Is the Trojan horse TR/Drop.Banload.akc
   [1] Archive type: RAR SFX (self extracting)
   --> svcdll.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banload.bpp.8
  --> Fotos.com
   [DETECTION] Is the Trojan horse TR/Drop.Banload.akc
   [1] Archive type: RAR SFX (self extracting)
   --> svcdll.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banlo.akc.1
   [INFO]    The file was deleted!

End of the scan: 2008年3月29日  22:18
Used time: 00:09 min

The scan has been done completely.

   0 Scanning directories
   28 Files were scanned
   26 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   4 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-29 22:20:54

一共24个，扫出26个？

扫描报告
2008年3月29日 22:25:30 - 22:25:32
计算机名称: WY
扫描类型: 扫描指定目标
目标: C:\Documents and Settings\WY-GM\桌面\pack2.rar

--------------------------------------------------------------------------------

结果: 发现22个恶意软件
Trojan-Downloader.Win32.Banload.bqy (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\veja_voce_mesmo.exe
C:\Documents and Settings\WY-GM\桌面\pack2.rar\video_saddam.exe
Trojan-Downloader.Win32.Banload.ack (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\depoimento.exe
Trojan-Downloader.Win32.Banload.bpp (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\SAC1.com
C:\Documents and Settings\WY-GM\桌面\pack2.rar\Sac.com
Trojan-Downloader.Win32.Small.suu (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\rll.exe
C:\Documents and Settings\WY-GM\桌面\pack2.rar\014s.exe
C:\Documents and Settings\WY-GM\桌面\pack2.rar\ogame.exe
Trojan-PSW.Win32.QQPass.bna (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\cmd.exe
Worm.Win32.Anilogo.f (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\107.exe
Trojan.Win32.BHO.ab (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\tk58.exe
Trojan.Win32.Pakes.brc (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\setup.exe
Trojan-PSW.Win32.Nilage.cfz (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\A.exe
AdWare.Win32.Agent.vu (adware)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\ismupd14.exe
AdWare.Win32.AdBand.n (adware)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\ismupd24.exe
AdWare.Win32.Agent.jn (adware)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\ismupd7.exe
Trojan.Win32.Pakes.wg (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\update.exe
Trojan-Downloader.Win32.VB.aro (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\foto.exe
C:\Documents and Settings\WY-GM\桌面\pack2.rar\fotos.exe
C:\Documents and Settings\WY-GM\桌面\pack2.rar\fotoss.exe
C:\Documents and Settings\WY-GM\桌面\pack2.rar\Foto0.exe
Trojan-Downloader.Win32.Agent.aui (病毒)
C:\Documents and Settings\WY-GM\桌面\pack2.rar\Fotos.com

--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 25
未扫描: 0
结果:
病毒: 19
间谍软件: 3
可疑对象: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
引导区:
已扫描: 0
受感染: 0
可疑对象: 0
已杀毒: 0

--------------------------------------------------------------------------------

选项
病毒定义版本:
病毒: 2008-03-29_02
间谍软件: 2008-03-29_02
扫描引擎:
F-Secure Orion: 1.02.38, 2008-03-29
F-Secure Libra: 2.04.04, 2008-03-28
F-Secure AVP: 7.00.171, 2008-03-29
F-Secure Draco: 1.00.35, 2008-02-13
扫描选项:
扫描指定类型的文件: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ JPG SWF ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
扫描压缩包内部
操作:
病毒: 隔离和删除
间谍软件: 隔离和删除

显示全部楼层 · 发表于 2008-3-29 22:21:05

C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » veja_voce_mesmo.exe - a variant of Win32/TrojanDownloader.Dadobra.IA trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » video_saddam.exe - a variant of Win32/TrojanDownloader.Dadobra.IA trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » depoimento.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » SAC1.com » RAR » svcdll.exe - Win32/TrojanDownloader.Agent.AUI trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » rll.exe - a variant of Win32/TrojanDownloader.Agent.NWE trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » 014s.exe - a variant of Win32/TrojanDownloader.Agent.NWE trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » ogame.exe - a variant of Win32/TrojanDownloader.Agent.NWE trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » cmd.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » 107.exe - Win32/Anilogo.F worm
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » tk58.exe - Win32/Adware.ZQuest application
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » setup.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » svcos.exe - a variant of Win32/TrojanDownloader.Small.OAL trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » ismupd14.exe » NSIS » QdrPack9.exe - probably a variant of Win32/Adware.Agent application
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » update.exe - probably a variant of Win32/Obfuscated trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » foto.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » fotos.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » fotoss.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » Foto0.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » Sac.com » RAR » svcdll.exe - Win32/TrojanDownloader.Agent.AUI trojan
C:\Documents and Settings\Don johnson\桌面\pack2.rar » RAR » Fotos.com » RAR » svcdll.exe - Win32/TrojanDownloader.Agent.AUI trojan

显示全部楼层 · 发表于 2008-3-29 22:21:40

貌似有重复的样本

时间处理结果木马名称木马进程名木马文件创建者
2008-03-29 22:21:01 处理成功 Trojan-Downloader.Win32.Banload.dnh C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SAC.COM C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:01 处理成功 Trojan-PSW.Win32.Nilages.gwb C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:01 处理成功 Trojan-PSW.Win32.OLGame.yqu C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SVCOS.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan.Win32.BHO.gc C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\TK58.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Worm.Win32.Anilogo.ik C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\107.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Adload.bbo C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\CMD.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Small.npa C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\OGAME.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Small.npa C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\014S.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Small.npa C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\RLL.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Banload.dnh C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SAC1.COM C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Banload.dkc C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\DEPOIMENTO.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Banload.dge C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\VIDEO_SADDAM.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:21:00 处理成功 Trojan-Downloader.Win32.Banload.dge C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\VEJA_VOCE_MESMO.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE

显示全部楼层 · 发表于 2008-3-29 22:22:38

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Banload.bqy
病毒： Trojan.DL.Small.uus
病毒： Trojan.DL.Banload.kih
病毒： RootKit.Win32.Undef.dg
病毒： Win32.Logogo.a
病毒： Trojan.BHO.eh
病毒： Trojan.DL.Win32.Mnless.yzz
病毒： Trojan.Win32.Pakes.d
病毒： Trojan.Downloader.VB.arp
病毒： Trojan.DL.VB.nbm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.52

显示全部楼层 · 发表于 2008-3-29 22:25:54

TO KL

显示全部楼层 · 发表于 2008-3-29 22:26:54

23
detected: Trojan program Trojan-Downloader.Win32.Banload.bqy File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/veja_voce_mesmo.exe
detected: Trojan program Trojan-Downloader.Win32.Banload.bqy File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/video_saddam.exe
detected: Trojan program Trojan-Downloader.Win32.Banload.ack File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/depoimento.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Banload.bpp File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/SAC1.com//data.rar/svcdll.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Downloader.Win32.Small.suu File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/rll.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.Small.suu File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/014s.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.Small.suu File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/ogame.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.QQPass.bna File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/cmd.exe//UPack//PE_Patch.MaskPE
detected: virus Worm.Win32.Anilogo.f File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/107.exe//UPack
detected: Trojan program Trojan.Win32.BHO.ab File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/tk58.exe
detected: Trojan program Trojan.Win32.Pakes.brc File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/setup.exe
detected: Trojan program Trojan-PSW.Win32.Nilage.cfz File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/A.exe//UPX
detected: adware not-a-virus:AdWare.Win32.Agent.vu File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/ismupd14.exe//stream//data0001
detected: adware not-a-virus:AdWare.Win32.AdBand.n File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/ismupd24.exe//stream//data0001
detected: adware not-a-virus:AdWare.Win32.Agent.jn File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/ismupd7.exe//data0002
detected: adware not-a-virus:AdWare.Win32.AdBand.c File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/ismupd7.exe//data0003
detected: Trojan program Trojan.Win32.Pakes.wg File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/update.exe
detected: Trojan program Trojan-Downloader.Win32.VB.aro File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/foto.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.VB.aro File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/fotos.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.VB.aro File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/fotoss.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.VB.aro File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/Foto0.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Banload.bpp File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/Sac.com
detected: Trojan program Trojan-Downloader.Win32.Agent.aui File: C:\Documents and Settings\Owner\×ÀÃæ\pack2.rar/Fotos.com//data.rar/svcdll.exe//PE_Patch.PECompact//PecBundle//PECompact

显示全部楼层 · 发表于 2008-3-29 22:28:06

要去睡了。。。 aerbeisi兄帮忙把没报的上报到FP吧
[Found downloader] <W32/Downloader.CFPF (exact, not disinfectable)> C:\virus\pack2.rar->veja_voce_mesmo.exe
[Found downloader] <W32/Downloader.CFPF (exact, not disinfectable)> C:\virus\pack2.rar->video_saddam.exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\pack2.rar->depoimento.exe->(UPack)
[Found downloader] <W32/Downloader.APMV (exact, not disinfectable)> C:\virus\pack2.rar->SAC1.com->(RAR)->svcdll.exe
[Found possible security risk] <W32/Heuristic-114!Eldorado (damaged, not disinfectable)> C:\virus\pack2.rar->rll.exe->(NSPack)->(PE_Patch)
[Found possible security risk] <W32/Heuristic-114!Eldorado (damaged, not disinfectable)> C:\virus\pack2.rar->014s.exe->(NSPack)->(PE_Patch)
[Found possible security risk] <W32/Heuristic-114!Eldorado (damaged, not disinfectable)> C:\virus\pack2.rar->ogame.exe->(NSPack)->(PE_Patch)
[Found virus] <W32/Downloader.gen10 (not disinfectable)> C:\virus\pack2.rar->cmd.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\pack2.rar->107.exe->(UPack)
[Found Trojan] <W32/Trojan.AEMD (exact, not disinfectable)> C:\virus\pack2.rar->tk58.exe
[Found possible virus] <W32/Threat-HLLSI-based!Maximus (not disinfectable)> C:\virus\pack2.rar->setup.exe
[Clean] C:\virus\pack2.rar->svcos.exe->(FSG)
[Clean] C:\virus\pack2.rar->A.exe->(UPX)
[Clean] C:\virus\pack2.rar->A.exe
[Clean] C:\virus\pack2.rar->ismupd14.exe
[Clean] C:\virus\pack2.rar->ismupd24.exe
[Clean] C:\virus\pack2.rar->ismupd7.exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\pack2.rar->update.exe->(UPack)
[Found possible virus] <W32/Swizzor-based!Maximus (not disinfectable)> C:\virus\pack2.rar->upAYB.exe
[Found possible virus] <W32/Document-disguised-based!Maximus (not disinfectable)> C:\virus\pack2.rar->foto.exe
[Found possible virus] <W32/Document-disguised-based!Maximus (not disinfectable)> C:\virus\pack2.rar->fotos.exe
[Found possible virus] <W32/Document-disguised-based!Maximus (not disinfectable)> C:\virus\pack2.rar->fotoss.exe
[Found possible virus] <W32/Document-disguised-based!Maximus (not disinfectable)> C:\virus\pack2.rar->Foto0.exe
[Found downloader] <W32/Downloader.APMV (exact, not disinfectable)> C:\virus\pack2.rar->Sac.com->(RAR)->svcdll.exe
[Found downloader] <W32/Downldr2.NVV (exact, not disinfectable)> C:\virus\pack2.rar->Fotos.com->(RAR)->svcdll.exe
[Contains infected objects] C:\virus\pack2.rar
[Quarantined] C:\virus\pack2.rar->Fotos.com->(RAR)->svcdll.exe

显示全部楼层 · 发表于 2008-3-29 22:56:17

23
C:\Documents and Settings\Administrator\桌面\pack2.rar>>107.exe Worm.Anilogo.f.bisa 病毒还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>A.exe TrojanPSW.Nilage.cfz.tcvv 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>foto.exe TrojanDownloader.VB.aro.xdub 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>014s.exe TrojanDownloader.Small.suu.lbic 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>ogame.exe TrojanDownloader.Small.suu.lbic 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>rll.exe TrojanDownloader.Small.suu.lbic 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>svcos.exe TrojanDownloader.Mnless.yzz.hnyi 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>veja_voce_mesmo.exe TrojanDownloader.Banload.bqy.zjtb 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>video_saddam.exe TrojanDownloader.Banload.bqy.zjtb 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>Sac.com>>svcdll.exe TrojanDownloader.Banload.bpp.pjh 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>SAC1.com>>svcdll.exe TrojanDownloader.Banload.bpp.pjh 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>depoimento.exe TrojanDownloader.Banload.ack.svqp 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>Fotos.com>>svcdll.exe TrojanDownloader.Agent.aui.wam 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>setup.exe Trojan.Pakes.brc.bzcq 木马还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>Foto0.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>fotos.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>fotoss.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>update.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>cmd.exe Generic.ff.aoap 病毒还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>tk58.exe Adware.ZQuest.arhr 广告程序还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>ismupd14.exe Adware.Agent.vu.bjrt.arc 广告程序还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>ismupd24.exe Adware.AdBand.n.vgme.arc 广告程序还未处理
C:\Documents and Settings\Administrator\桌面\pack2.rar>>ismupd7.exe Adware.AdBand.c.dgdc.arc 广告程序还未处理

[病毒样本] 24x

本帖子中包含更多资源

26

20

47/19