[病毒样本] 5

显示全部楼层 · 发表于 2008-4-19 21:26:51

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.gup 檔案: C:\Documents and Settings\kato9096\桌面\複製 -net.rar/net.exe//PE_Patch.UPX//UPX

上报4

Hello,

time.bat2, winsys.exe2, winsys.inf, winsys.sys2

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-20 20:43 编辑 ]

显示全部楼层 · 发表于 2008-4-19 21:33:03

rising20.40.52未杀！

显示全部楼层 · 发表于 2008-4-19 21:33:13

C:\Documents and Settings\Don johnson\桌面\net.rar » RAR » net.exe2 - a variant of Win32/Mypis virus
C:\Documents and Settings\Don johnson\桌面\net.rar » RAR » winsys.exe2 - Win32/Agent.NSY trojan
C:\Documents and Settings\Don johnson\桌面\net.rar » RAR » winsys.sys2 - Win32/Agent.NSY trojan

显示全部楼层 · 发表于 2008-4-19 21:38:09

更新？

今天的样本基本收工

显示全部楼层 · 发表于 2008-4-19 21:38:34

是最新的

显示全部楼层 · 发表于 2008-4-19 22:11:06

对象: net.exe2
路径: C:\Documents and Settings\Administrator\桌面\net
狀態: 无法清除病毒
病毒: Trojan-Downloader.Win32.Delf.gup (KAV 引擎)
对象: winsys.exe2
路径: C:\Documents and Settings\Administrator\桌面\net
狀態: 无法清除病毒
病毒: Win32:Agent-TBP [Trj] (AVST 引擎)

显示全部楼层 · 发表于 2008-4-20 00:44:49

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\net'
C:\Documents and Settings\Administrator\My Documents\net\
  net.exe2
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
   [NOTE]    The file was deleted!
  time.bat2
  winsys.exe2
  winsys.inf
  winsys.sys2

End of the scan: 2008年4月19日  09:44
Used time: 00:04 min

The scan has been done completely.

   1 Scanning directories
   5 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-4-20 00:46:17

3816490    winsys.exe2    44 KB    CLEAN
3282058    winsys.inf    2.62 KB    CLEAN
3807861    winsys.sys2    20.63 KB    CLEAN

显示全部楼层 · 发表于 2008-4-20 08:19:17

木马名称:Trojan-Downloader.Win32.Delf.kad

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\NET.EXE2
是木马程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Agent.flo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WINSYS.EXE2
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Agent.flu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WINSYS.SYS2
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-4-20 11:44:48

信息 2008-04-20  11:44:27 您此次查毒清除了2个病毒
信息 2008-04-20  11:44:27 您此次查毒共查出2个病毒以及危险代码
信息 2008-04-20  11:44:27 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件8个
信息 2008-04-20  11:44:27 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-20  11:44:27 D:\Desktop\net.rar\winsys.exe2 Win32.Troj.Agent.45056 清除成功
病毒 2008-04-20  11:44:27 D:\Desktop\net.rar\net.exe2 Win32.TrojDownloader.Delf.81920 清除成功

[病毒样本] 5

本帖子中包含更多资源

7/0

3

回复 4楼 wangjay1980 的帖子