bluedit 20

显示全部楼层 · 发表于 2008-4-5 19:36:54

PWS-Bluedit / McAfee

作者更新很勤..域名很多...

显示全部楼层 · 发表于 2008-4-5 19:39:58

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.VB.ynt

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.38.50

显示全部楼层 · 发表于 2008-4-5 19:43:06

C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080403.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xiA2.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia3.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080402.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia4.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080331.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia5.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080330.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia6.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080329.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia7.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080327.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080326.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia8.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia9.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080325.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » xia10.exe - a variant of Win32/TrojanDownloader.VB.AHQ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080324.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\be.rar » RAR » 080404.exe - a variant of Win32/TrojanClicker.VB.NCJ trojan

显示全部楼层 · 发表于 2008-4-5 19:43:52

呃如果从这个角度来看的话偶同情下这个作者他从去年8月到现在天天更新这些毒...

显示全部楼层 · 发表于 2008-4-5 19:50:54

KV全部MISS

显示全部楼层 · 发表于 2008-4-5 19:58:09

IKARUS
21 Files scanned
(1 Archiv with 20 files)
20 Signatures found
0 Suspect code-parts found
Used time: 0:00.235

显示全部楼层 · 发表于 2008-4-5 19:59:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\be.rar'
C:\Documents and Settings\Administrator\桌面\be.rar
  [0] Archive type: RAR
  --> xia.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> xiA2.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> xia3.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> xia4.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> xia5.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> xia6.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> xia7.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.dqk
  --> 080326.exe
   [DETECTION] Is the Trojan horse TR/Click.Pamere.DE
  --> xia8.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.dpb
  --> xia9.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.VLG.55
  --> 080325.exe
   [DETECTION] Is the Trojan horse TR/Click.Pamere.DF
  --> xia10.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.dkz
  --> 080324.exe
   [DETECTION] Is the Trojan horse TR/Click.Pamere.DC
   [INFO]    The file was deleted!

End of the scan: 星期六 2008年4月5日  19:58
Used time: 00:11 min

The scan has been done completely.

   0 Scanning directories
   21 Files were scanned
   7 viruses and/or unwanted programs were found
   6 Files were classified as suspicious:
   1 files were deleted

显示全部楼层 · 发表于 2008-4-5 20:05:20

卡巴7报9个

显示全部楼层 · 发表于 2008-4-5 20:13:56

D:\download\be.rar>>080326.exe AdClicker.FO.ccca 广告程序还未处理
D:\download\be.rar>>080325.exe AdClicker.FO.fkpz 广告程序还未处理

就认识2个

显示全部楼层 · 发表于 2008-4-5 20:27:08

sophos 全部殺掉

[病毒样本] bluedit 20

本帖子中包含更多资源

21/1作者为了出名！

20

回复 2楼 qigang 的帖子