今天找到的病毒包

显示全部楼层 · 发表于 2008-4-10 11:28:21

今天找到的病毒包

显示全部楼层 · 发表于 2008-4-10 11:31:25

[Found backdoor] <W32/Backdoor2.PUR (exact, not disinfectable)> C:\test\bigdu.rar->bigdu\a25[1].exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\bigdu.rar->bigdu\der[1].exe->(UPack)

显示全部楼层 · 发表于 2008-4-10 11:33:11

E:\VIRUS\bigdu\bigdu\a25[1].exe Hacktool.ArpCheater.a.vhst 黑客工具还未处理
E:\VIRUS\bigdu\bigdu\der[1].exe TrojanDownloader.Nurech.bd.bmqk 木马还未处理
E:\VIRUS\bigdu\bigdu\oko[1].exe Trojan.PopUpper.r.jhnz 木马还未处理

显示全部楼层 · 发表于 2008-4-10 11:35:24

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\bigdu.rar'
E:\新建文件夹 (2)\bigdu.rar
  [0] Archive type: RAR
  --> bigdu\a25[1].exe
   [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.2
  --> bigdu\der[1].exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> bigdu\oko[1].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Tiny.aas
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-10 11:37:57

The scan has been done completely.

   0 Scanning directories
   9 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-10 11:38:50

新手
E:\...\[ASPack] 感染: Win32:Delf-DQP [Trj] 修复文件时产生错误: 文件没有被修复.
E:\...\A8FABA189DB7D25FBA7CAC806625FD30 无法扫描: 因为扫描器设定,文件被略过.
E:\...\d2b282ef026d1708656.bat 无法扫描: 因为扫描器设定,文件被略过.
E:\...\explorer.exe 无法扫描: 因为扫描器设定,文件被略过.
E:\...\bigdu.rar 无法扫描: 因为扫描器设定,文件被略过.

显示全部楼层 · 发表于 2008-4-10 12:15:51

信息 2008-04-10  12:15:23 您此次查毒清除了2个病毒
信息 2008-04-10  12:15:23 您此次查毒共查出2个病毒以及危险代码
信息 2008-04-10  12:15:23 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件9个
信息 2008-04-10  12:15:23 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-10  12:15:22 D:\Desktop\bigdu.rar\bigdu\oko[1].exe Win32.Troj.PopUpper.r.1024 清除成功
病毒 2008-04-10  12:15:22 D:\Desktop\bigdu.rar\bigdu\a25[1].exe Win32.Hack.Agent.282624 清除成功

显示全部楼层 · 发表于 2008-4-10 12:36:34

2008-4-10 PM 12:34:22 未采取操作 C:\Documents and Settings\Administrator\桌面\bigdu.rar\A25[1].EXE\0003f758.EXE\0003f758.EXE NetSniff(特洛伊)
2008-4-10 PM 12:34:22 未采取操作 C:\Documents and Settings\Administrator\桌面\bigdu.rar\A25[1].EXE\00028d28.EXE New Malware.aq(特洛伊)
2008-4-10 PM 12:34:22 未采取操作 C:\Documents and Settings\Administrator\桌面\bigdu.rar\A25[1].EXE\00021530.EXE New Malware.aq(特洛伊)
2008-4-10 PM 12:34:22 未采取操作 C:\Documents and Settings\Administrator\桌面\bigdu.rar\A25[1].EXE\000185b8.EXE New Malware.aq(特洛伊)
2008-4-10 PM 12:34:22 未采取操作 C:\Documents and Settings\Administrator\桌面\bigdu.rar\A25[1].EXE\00011660.EXE New Malware.aq(特洛伊)

显示全部楼层 · 发表于 2008-4-10 12:58:04

2008-4-10 12:57:27 已清除特洛伊程序 Trojan.Win32.PopUpper.r C:\Documents and Settings\Administrator\桌面\bigdu.rar
2008-4-10 12:57:27 已清除特洛伊程序 Backdoor.Win32.Agent.fjs C:\Documents and Settings\Administrator\桌面\bigdu.rar/bigdu\a25[1].exe
2008-4-10 12:57:27 已清除特洛伊程序 Trojan-Downloader.Win32.Small.ugk C:\Documents and Settings\Administrator\桌面\bigdu.rar/bigdu\der[1].exe//PE_Patch//UPack
2008-4-10 12:57:27 已清除特洛伊程序 Trojan.Win32.PopUpper.r C:\Documents and Settings\Administrator\桌面\bigdu.rar/bigdu\oko[1].exe

显示全部楼层 · 发表于 2008-4-10 13:19:21

[病毒样本] 今天找到的病毒包

本帖子中包含更多资源

本帖子中包含更多资源