6个

显示全部楼层 · 发表于 2008-4-19 16:16:07

C:\ABC\6.rar:\6\awtTklkh.dll
C:\ABC\6.rar:\6\ibudu.dll - 特征码 'Trojan-Proxy.Bunitu.A' 被发现
C:\ABC\6.rar:\6\itcoe.sys - 特征码 'Trojan.Rootkit' 被发现
C:\ABC\6.rar:\6\mrofinu1188.exe - 特征码 'Trojan-Downloader.Agent.ZEX' 被发现
C:\ABC\6.rar:\6\pac.txt - 特征码 'Trojan-Downloader.VB.VPG' 被发现
C:\ABC\6.rar:\6\xcsDd051080.exe - 特征码 'Trojan-Downloader.Win32.VB.dht' 被发现
C:\ABC\6.rar

显示全部楼层 · 发表于 2008-4-19 16:18:06

C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 6\ibudu.dll - probably a variant of Win32/Spy.Goldun.WP trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 6\itcoe.sys - probably a variant of Win32/Spy.Goldun.WP trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 6\mrofinu1188.exe - Win32/TrojanDownloader.Agent.BLS trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 6\xcsDd051080.exe - a variant of Win32/TrojanDownloader.VB.AW trojan

显示全部楼层 · 发表于 2008-4-19 16:20:09

江民杀毒软件报告文件

北京江民新科技术有限公司

扫描引擎 11.00.703
病毒库日期 2008-04-19
更新日期 2008-04-04

扫描目标 C:\Documents and Settings\Administrator\桌面\6.rar

开始时间 2008-04-04 05:49:07

在 C:\Documents and Settings\Administrator\桌面\6.rar->6\mrofinu1188.exe 中发现 TrojanDownloader.Homles.c 病毒, 已删除
正常结束。

扫描结果:
               文件数 :8                                  病毒体 :1
               删除 :1                                  解毒 :0
扫描速度(千字节/秒) :31                               扫描时间 :00:00:15
扫描文件速度(个/秒) :0

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -    - - - - - - - - - - - -

显示全部楼层 · 发表于 2008-4-19 16:21:23

Begin scan in 'C:\Documents and Settings\He Chao\桌面\6.rar'
C:\Documents and Settings\He Chao\桌面\6.rar
  [0] Archive type: RAR
--> 6\ibudu.dll
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 6\itcoe.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 6\mrofinu1188.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 6\xcsDd051080.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.dht.4
   [WARNING] The file was ignored!
其余上报

显示全部楼层 · 发表于 2008-4-19 16:25:06

3824555 awtTklkh.dll 37 KB UNDER ANALYSIS
2224465 pac.txt 273.05 KB CLEAN

显示全部楼层 · 发表于 2008-4-19 16:33:34

闲着没事玩KIS8.0
2008-4-19 16:33:17 未清除: Trojan-Downloader.Win32.VB.dht C:\Documents and Settings\Administrator\桌面\6.rar/6\xcsDd051080.exe 由用户跳过
2008-4-19 16:33:16 已被检测到: Trojan-Downloader.Win32.VB.dht C:\Documents and Settings\Administrator\桌面\6.rar/6\xcsDd051080.exe
2008-4-19 16:33:16 未清除: Trojan-Downloader.Win32.Homles.bi C:\Documents and Settings\Administrator\桌面\6.rar/6\mrofinu1188.exe 由用户跳过
2008-4-19 16:33:13 已被检测到: Trojan-Downloader.Win32.Homles.bi C:\Documents and Settings\Administrator\桌面\6.rar/6\mrofinu1188.exe
2008-4-19 16:33:13 未清除: Trojan-Proxy.Win32.Agent.agx C:\Documents and Settings\Administrator\桌面\6.rar/6\itcoe.sys 由用户跳过
2008-4-19 16:33:11 已被检测到: Trojan-Proxy.Win32.Agent.agx C:\Documents and Settings\Administrator\桌面\6.rar/6\itcoe.sys
2008-4-19 16:33:11 未清除: Trojan-Proxy.Win32.Corpes.i C:\Documents and Settings\Administrator\桌面\6.rar/6\ibudu.dll/PE_Patch.UPX/UPX 由用户跳过
2008-4-19 16:33:08 已被检测到: Trojan-Proxy.Win32.Corpes.i C:\Documents and Settings\Administrator\桌面\6.rar/6\ibudu.dll/PE_Patch.UPX/UPX
2008-4-19 16:33:08 未清除: not-a-virus:AdWare.Win32.Virtumonde.pij C:\Documents and Settings\Administrator\桌面\6.rar/6\awtTklkh.dll 由用户跳过
2008-4-19 16:32:59 已被检测到: not-a-virus:AdWare.Win32.Virtumonde.pij C:\Documents and Settings\Administrator\桌面\6.rar/6\awtTklkh.dll
2008-4-19 16:32:59 未清除: Trojan-Downloader.Win32.VB.dht C:\Documents and Settings\Administrator\桌面\6.rar/6\xcsDd051080.exe 已延期
2008-4-19 16:32:59 已被检测到: Trojan-Downloader.Win32.VB.dht C:\Documents and Settings\Administrator\桌面\6.rar/6\xcsDd051080.exe
2008-4-19 16:32:59 未清除: Trojan-Downloader.Win32.Homles.bi C:\Documents and Settings\Administrator\桌面\6.rar/6\mrofinu1188.exe 已延期
2008-4-19 16:32:59 已被检测到: Trojan-Downloader.Win32.Homles.bi C:\Documents and Settings\Administrator\桌面\6.rar/6\mrofinu1188.exe
2008-4-19 16:32:59 未清除: Trojan-Proxy.Win32.Agent.agx C:\Documents and Settings\Administrator\桌面\6.rar/6\itcoe.sys 已延期
2008-4-19 16:32:59 已被检测到: Trojan-Proxy.Win32.Agent.agx C:\Documents and Settings\Administrator\桌面\6.rar/6\itcoe.sys
2008-4-19 16:32:59 未清除: Trojan-Proxy.Win32.Corpes.i C:\Documents and Settings\Administrator\桌面\6.rar/6\ibudu.dll/PE_Patch.UPX/UPX 已延期
2008-4-19 16:32:59 已被检测到: Trojan-Proxy.Win32.Corpes.i C:\Documents and Settings\Administrator\桌面\6.rar/6\ibudu.dll/PE_Patch.UPX/UPX
2008-4-19 16:32:59 未清除: not-a-virus:AdWare.Win32.Virtumonde.pij C:\Documents and Settings\Administrator\桌面\6.rar/6\awtTklkh.dll 已延期
2008-4-19 16:32:59 已被检测到: not-a-virus:AdWare.Win32.Virtumonde.pij C:\Documents and Settings\Administrator\桌面\6.rar/6\awtTklkh.dll

显示全部楼层 · 发表于 2008-4-19 16:35:22

信息 2008-04-19  16:34:31 您此次查毒清除了1个病毒
信息 2008-04-19  16:34:31 您此次查毒共查出1个病毒以及危险代码
病毒 2008-04-19  16:34:31 \桌面\6.rar\6\xcsDd051080.exe Win32.TrojDownloader.VB.32768 清除成功
上报。。。

显示全部楼层 · 发表于 2008-4-19 16:36:55

TO KL

显示全部楼层 · 发表于 2008-4-19 16:37:41

小红伞查4个

显示全部楼层 · 发表于 2008-4-19 16:54:04

Trojan.Win32.VUNDO.bcx
Trojan.DL.Win32.Homles.a

[病毒样本] 6个

本帖子中包含更多资源

回复 1楼 promised 的帖子

Kaspersky 2009

本帖子中包含更多资源