[病毒样本] 9

显示全部楼层 · 发表于 2008-4-19 22:00:19

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Delf.zaj
病毒： Dropper.Win32.Delf.pnq
病毒： ADWare.Navi

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.40.52

显示全部楼层 · 发表于 2008-4-19 22:06:37

对象: dm_0233.exe
路径: C:\Documents and Settings\Administrator\桌面\multi
狀態: 无法清除病毒
病毒: Trojan.Win32.Radi.ex (KAV 引擎)
对象: FlyCodec.exe
路径: C:\Documents and Settings\Administrator\桌面\multi
狀態: 无法清除病毒
病毒: Trojan-Downloader.Win32.Zlob.jau (KAV 引擎)
对象: loadx.exe
路径: C:\Documents and Settings\Administrator\桌面\multi
狀態: 无法清除病毒
病毒: Trojan.Win32.Pakes.cqr (KAV 引擎)
对象: NaviHelper.dll
路径: C:\Documents and Settings\Administrator\桌面\multi
狀態: 无法清除病毒
病毒: not-a-virus:AdWare.Win32.Navi (KAV 引擎), Win32:Adware-gen [Adw] (AVST 引擎)
对象: svchost.exe
路径: C:\Documents and Settings\Administrator\桌面\multi
狀態: 无法清除病毒
病毒: Trojan.Win32.Agent.ebr (KAV 引擎)
对象: XXXmediaCodec.exe
路径: C:\Documents and Settings\Administrator\桌面\multi
狀態: 无法清除病毒
病毒: Trojan-Downloader.Win32.Zlob.jau (KAV 引擎)
扫描完成: 4/19/2008 22:06
已检查 9 个文件
已发现 6 个染毒文件

显示全部楼层 · 发表于 2008-4-19 22:10:06

瑞星也报了啊，可以宣布全能报了。

显示全部楼层 · 发表于 2008-4-19 22:16:10

D:\firefox download\multi.rar » RAR » AccessMediaSetup.exe » ASPack v2.12 - is OK
D:\firefox download\multi.rar » RAR » animan.class - Java/TrojanDownloader.OpenStream.NAC trojan
D:\firefox download\multi.rar » RAR » dm_0233.exe - is OK
D:\firefox download\multi.rar » RAR » FlyCodec.exe - is OK
D:\firefox download\multi.rar » RAR » loadx.exe - is OK
D:\firefox download\multi.rar » RAR » NaviHelper.dll - is OK
D:\firefox download\multi.rar » RAR » svchost.exe - Win32/IRCBot.AER trojan
D:\firefox download\multi.rar » RAR » update.exe » FSG v2.0 - is OK
D:\firefox download\multi.rar » RAR » XXXmediaCodec.exe - is OK
D:\firefox download\multi.rar:Zone.Identifier - is OK

显示全部楼层 · 发表于 2008-4-19 22:34:34

TO KL

显示全部楼层 · 发表于 2008-4-19 22:40:13

Begin scan in 'E:\VIRUS\multi.rar'
E:\VIRUS\multi.rar
  [0] Archive type: RAR
  --> dm_0233.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> FlyCodec.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> loadx.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> NaviHelper.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/NaviHelper
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
--> update.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
  --> XXXmediaCodec.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
   [WARNING] The file was ignored!

End of the scan: 2008年4月19日  22:38
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   10 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-19 22:41:17

19:04:2008 22:38:53 SEARCHTASK "USER_DEFINED" started...
scan item: E:\VIRUS\multi
Directory scanned(filestreams): E:\VIRUS\multi
File scanned: E:\VIRUS\multi\AccessMediaSetup.exe - SIGNATURE FOUND "Virus.Win32.Delf.JHW"
File scanned: E:\VIRUS\multi\animan.class
File scanned: E:\VIRUS\multi\dm_0233.exe - SIGNATURE FOUND "Trojan.Crypt.XDR"
File scanned: E:\VIRUS\multi\FlyCodec.exe
File scanned: E:\VIRUS\multi\loadx.exe - SIGNATURE FOUND "Backdoor.Win32.Bifrose.afc"
File scanned: E:\VIRUS\multi\NaviHelper.dll - SIGNATURE FOUND "not-a-virus:AdWare.Win32.Navi"
File scanned: E:\VIRUS\multi\svchost.exe - SIGNATURE FOUND "Trojan.Crypt.XPACK"
File scanned: E:\VIRUS\multi\update.exe
File scanned: E:\VIRUS\multi\XXXmediaCodec.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.jau"
19:04:2008 22:38:55 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 9
Virus found: 6
----------------------------------------------------

显示全部楼层 · 发表于 2008-4-20 00:54:11

1253612 animan.class 827 Byte CLEAN

显示全部楼层 · 发表于 2008-4-20 00:55:35

C:\Documents and Settings\Administrator\桌面\multi.rar>>animan.class Exploit.ByteVerify.sokq 黑客工具还未处理
C:\Documents and Settings\Administrator\桌面\multi.rar>>dm_0233.exe Trojan.Radi.ex.danq 木马还未处理
C:\Documents and Settings\Administrator\桌面\multi.rar>>FlyCodec.exe TrojanDownloader.Zlob.jau.jwwy 木马还未处理
C:\Documents and Settings\Administrator\桌面\multi.rar>>NaviHelper.dll Adware.Navihelper.dll 广告程序还未处理
C:\Documents and Settings\Administrator\桌面\multi.rar>>svchost.exe Trojan.Agent.ebr.qawq 木马还未处理
C:\Documents and Settings\Administrator\桌面\multi.rar>>update.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
C:\Documents and Settings\Administrator\桌面\multi.rar>>XXXmediaCodec.exe TrojanDownloader.Zlob.jau.jwwy 木马还未处理

[病毒样本] 9

本帖子中包含更多资源

13/4

2

本帖子中包含更多资源

IK