间谍

显示全部楼层 · 发表于 2008-4-2 20:18:02

测测

显示全部楼层 · 发表于 2008-4-2 20:21:44

Starting the file scan:

Begin scan in 'E:\pop.rar'
E:\pop.rar
  [0] Archive type: RAR
  --> POP.EXE
   [DETECTION] Contains detection pattern of the dropper DR/Agent.GWH
   [1] Archive type: ZIP SFX (self extracting)
   --> 2221.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.VLU
  --> 11E.EXE
   [DETECTION] Contains detection pattern of the dropper DR/Agent.GWG
   [1] Archive type: RAR SFX (self extracting)
   --> pop.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.GWH
      [2] Archive type: ZIP SFX (self extracting)
      --> 2221.exe
         [DETECTION] Is the Trojan horse TR/Dldr.VB.VLU
   [WARNING] The file was ignored!
Begin scan in 'E:\1(1).rar'
E:\1(1).rar
  [0] Archive type: RAR
--> DDD.PIF
   [1] Archive type: RAR SFX (self extracting)
   --> 1.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 1.EXE
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
   [WARNING] The file was ignored!

End of the scan: 2008年4月2日  20:23
Used time: 00:33 min

The scan has been done completely.

   0 Scanning directories
   16 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   9 Files not concerned
   6 Archives were scanned
   2 Warnings
   0 Notes

The file 'DDD.PIF' has been determined to be 'UNDER ANALYSIS'.

[ 本帖最后由 Exia 于 2008-4-2 20:26 编辑 ]

显示全部楼层 · 发表于 2008-4-2 20:23:47

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.VB.xmh

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.38.21

显示全部楼层 · 发表于 2008-4-2 20:28:47

信息 2008-04-02  20:28:30 您此次查毒共查出2个病毒以及危险代码
信息 2008-04-02  20:28:30 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件14个
信息 2008-04-02  20:28:30 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-02  20:28:30 D:\Desktop\1.rar\1.EXE Win32.Packed.MaskPE 跳过，未处理
病毒 2008-04-02  20:28:30 D:\Desktop\1.rar\DDD.PIF\BindFile\1.exe Win32.Packed.MaskPE 跳过，未处理

显示全部楼层 · 发表于 2008-4-2 20:39:29

McAfee 1.rar New Malware.aq

显示全部楼层 · 发表于 2008-4-2 20:58:20

The file 'DDD.PIF' has been determined to be 'MALWARE'. Virus name is DROPPER (en) Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-4-2 21:10:16

在 C:\Documents and Settings\Administrator\桌面\pop.rar->POP.EXE->2221.exe 中发现 TrojanDownloader.VB.hxn 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\pop.rar->11E.EXE->pop.exe->2221.exe 中发现 TrojanDownloader.VB.hxn 病毒, 已删除

显示全部楼层 · 发表于 2008-4-2 21:22:25

显示全部楼层 · 发表于 2008-4-2 22:06:06

6个

显示全部楼层 · 发表于 2008-4-2 22:08:28

[病毒样本] 间谍

本帖子中包含更多资源

7

24/2

本帖子中包含更多资源

本帖子中包含更多资源

江民报第一个。。。

本帖子中包含更多资源