[病毒样本] 3

显示全部楼层 · 发表于 2008-4-8 20:43:59

已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.dht 檔案: C:\Documents and Settings\kato9096\桌面\3.rar/hdfile.sys
已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.cci 檔案: C:\Documents and Settings\kato9096\桌面\3.rar/hdport.sys
已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.hkx 檔案: C:\Documents and Settings\kato9096\桌面\3.rar/qtplugin.exe

显示全部楼层 · 发表于 2008-4-8 20:44:02

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\3.rar'
E:\新建文件夹 (2)\3.rar
  [0] Archive type: RAR
  --> hdfile.sys
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.dht Backdoor server programs
  --> hdport.sys
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.cci.1 Backdoor server programs
  --> qtplugin.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.dht Backdoor server programs
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-8 20:46:01

C:\Documents and Settings\Don johnson\桌面\3.rar » RAR » hdfile.sys - Win32/Delf.DHT trojan
C:\Documents and Settings\Don johnson\桌面\3.rar » RAR » hdport.sys - Win32/Delf.CCI trojan
C:\Documents and Settings\Don johnson\桌面\3.rar » RAR » qtplugin.exe - probably unknown NewHeur_PE virus

显示全部楼层 · 发表于 2008-4-8 20:53:48

D:\download\3.rar>>hdport.sys Backdoor.Delf.cci.noyz 后门还未处理
D:\download\3.rar>>qtplugin.exe>>emb-3.exe Backdoor.Delf.cci.noyz 后门还未处理

显示全部楼层 · 发表于 2008-4-8 20:58:27

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.Mnless.hx
病毒： RootKit.Win32.Mnless.hx

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.39.12

显示全部楼层 · 发表于 2008-4-8 21:47:32

[Found backdoor] <W32/Backdoor2.AICZ (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\3.rar->hdfile.sys
[Found backdoor] <W32/Backdoor2.AHGT (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\3.rar->hdport.sys

---------------------------------------------------------------------
Scan ended: 2008-4-8, 21:47:29
Duration: 0:00:01

Scan result:

Scanned files:    6
Infected objects:    2
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-4-8 21:47:53

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:hdport.sys <- Trojan.Delf.Cci : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:qtplugin.exe<DLLRES>:HIDEPORT2.exe <- Trojan.Delf.Cci : No action

Scanned objects : 7

Infected objects : 2

显示全部楼层 · 发表于 2008-4-8 22:03:21

金山 0

显示全部楼层 · 发表于 2008-4-9 16:26:32

ESS:3/4
C:\Documents and Settings\桌面\3.rar > RAR > hdfile.sys - Win32/Delf.DHT 特洛伊木马
C:\Documents and Settings\桌面\3.rar > RAR > hdport.sys - Win32/Delf.CCI 特洛伊木马
C:\Documents and Settings\桌面\3.rar > RAR > qtplugin.exe - 未查明的 NewHeur_PE 病毒

[病毒样本] 3

本帖子中包含更多资源

7/3