红伞扫的4个

显示全部楼层 · 发表于 2008-4-20 10:03:03

装完v8扫的全盘，有三个不清楚是不是病毒，不过其中一个绝对是误报

显示全部楼层 · 发表于 2008-4-20 10:08:12

C:\Documents and Settings\Administrator\桌面\1.rar>>1\xnqot[1].cab>>wmpns.dll TrojanDownloader.ZSKiller.2.nhuo.arc.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\2.rar>>2\.vbs Virus.VBS.Agent.ai.evrp 病毒还未处理

显示全部楼层 · 发表于 2008-4-20 10:10:30

Sign of "Win32:Zskiller-B [Trj]" has been found in "F:\1.rar\1\xnqot[1].cab\wmpns.dll\cdnaux.dll" file.
Sign of "Win32:Trojano-DF [Trj]" has been found in "F:\1.rar\1\xnqot[1].cab\wmpns.dll" file.
Sign of "VBS:Malware-gen" has been found in "F:\2.rar\2\.vbs" file.

显示全部楼层 · 发表于 2008-4-20 10:16:15

kv kill 1 ge

显示全部楼层 · 发表于 2008-4-20 10:51:17

xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
type="win32"
processorArchitecture="*"
version="6.0.0.0"
name="mash"
/>
<description>AutoIt 3</description>
<dependency>
<dependentAssembly>
      <assemblyIdentity
         type="win32"
         name="Microsoft.Windows.Common-Controls"
         version="6.0.0.0"
         language="*"
         processorArchitecture="*"
      publicKeyToken="6595b64144ccf1df"
      />
</dependentAssembly>
</dependency>
</assembly> KERNEL32.DLL ADVAPI32.dll COMCTL32.dll comdlg32.dll GDI32.dll MPR.dll ole32.dll OLEAUT32.dll SHELL32.dll USER32.dll VERSION.dll WINMM.dll WSOCK32.dll LoadLibraryA  GetProcAddress  VirtualProtect  ExitProcess RegCloseKey ImageList_Remove  GetSaveFileNameA  LineTo  WNetUseConnectionA  CoInitialize  DragFinish  GetDC VerQueryValueA  timeGetTime

显示全部楼层 · 发表于 2008-4-20 10:52:50

2.rar
Trojan.Script.VBS.Agent.q

显示全部楼层 · 发表于 2008-4-20 10:54:09

tLastError M CreateFileA . CloseHandle SetLastError ?GetProcAddress wGetModuleHandleA ?ExitProcess =SetUnhandledExceptionFilter ?WriteProcessMemory :GetCurrentProcess {VirtualProtect GLeaveCriticalSection ?EnterCriticalSection >GetCurrentThreadId ?DeviceIoControl ?OutputDebugStringA ?lstrcmpA ?GetSystemDirectoryA uGetModuleFileNameA ?GetVersion ?_lclose ?_lopen ?GetTickCount ?ResumeThread KSuspendThread ?GetVersionExA HLoadLibraryA }VirtualQuery z DeleteCriticalSection [GetFileSize InitializeCriticalSection KERNEL32.dll ?MessageBoxA CallWindowProcA CallWindowProcW SetWindowLongA

显示全部楼层 · 发表于 2008-4-20 11:03:15

信息 2008-04-20  11:02:56 您此次查毒清除了1个病毒
信息 2008-04-20  11:02:56 您此次查毒共查出1个病毒以及危险代码
信息 2008-04-20  11:02:56 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件9个
信息 2008-04-20  11:02:56 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-20  11:02:56 D:\Desktop\2.rar\2\.vbs VBS.Downloader.kk.27500 清除成功

显示全部楼层 · 发表于 2008-4-20 22:58:10

SELECT~1.EXE_, wmpns.dll

No malicious code were found in these files.

[病毒样本] 红伞扫的4个

本帖子中包含更多资源

selectie7.rar

Trojan.Script.VBS.Agent.q

1.rar

浏览过的版块