[病毒样本] 10

显示全部楼层 · 发表于 2008-4-29 20:35:22

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:ss.exe <- Trojan.Downloader.Small.Ixw : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:down.exe <- Worm.Downloader.Ix : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:down.exe<UPack>:down.exe <- Variant:Trojan.Agent.Fb : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:614.exe<UPack>:614.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:614.exe<UPack>:614.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:614.exe<UPack>:614.exe<DLLRES>:res1.exe <- Downloader.Small.Hzk : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:abd.exe <- Trojan.Downloader.Agent.Nra : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:down2.exe <- Worm.Downloader.Ix : No action
C:\Documents and Settings\All Users\Documents\Test\dd.rar<RAR>:down2.exe<UPack>:down2.exe <- Variant:Trojan.Agent.Fb : No action

Scanned objects : 24

Infected objects : 9

显示全部楼层 · 发表于 2008-4-29 20:35:55

[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->baidu.cab->Baidu.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->ss.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->s.exe->(UPack)
[Found possible security risk] <W32/Heuristic-224!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->mm.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->down.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->614.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->Baidu.exe->(UPack)
[Found possible security risk] <W32/Heuristic-224!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->abd.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\dd.rar->down2.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-4-29, 20:35:49
Duration: 0:00:08

Scan result:

Scanned files:    6
Infected objects:    9
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-4-29 20:37:24

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.zhx
病毒： Trojan.DL.Win32.VB.yjm
病毒： Trojan.PSW.Win32.OnlineGames.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.42.12

显示全部楼层 · 发表于 2008-4-29 20:39:50

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Murlo.lv 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/baidu.cab/Baidu.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.ixw 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/ss.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Tiny.arh 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/s.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.VB.bhr 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/51.exe//dsig//PE_Patch.EPProt//PE_Patch.UPX//UPX
已刪除: 病毒 Worm.Win32.Downloader.ix 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/down.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ppu 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/614.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Murlo.lv 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/Baidu.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.nra 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/abd.exe//PE_Patch//UPack
已刪除: 病毒 Worm.Win32.Downloader.ix 檔案: C:\Documents and Settings\kato9096\桌面\dd.rar/down2.exe//PE_Patch//UPack

9,上报一个

显示全部楼层 · 发表于 2008-4-29 20:48:18

邮件提交成功！
您向瑞星公司提供的病毒样本将用于改善和提高瑞星产品的病毒处理能力，我们为您所做出的无私奉
献表示感谢！
我们会尽快受理您提交的信息，并将病毒样本文件的分析结果回复给您。
由于网络因素等影响，若您长时间未收到病毒样本文件的分析结果请重新核实填写的邮件地址再次提
交，谢谢您的合作！

显示全部楼层 · 发表于 2008-4-29 21:12:43

显示全部楼层 · 发表于 2008-4-29 22:03:53

dd.rar\ss.exe;C:\Documents and Settings\Administrator\桌面\dd.rar;可能 DLOADER.Trojan;;
dd.rar\s.exe;C:\Documents and Settings\Administrator\桌面\dd.rar;Trojan.DownLoader.origin;;
dd.rar\mm.exe;C:\Documents and Settings\Administrator\桌面\dd.rar;可能 MULDROP.Trojan;;
dd.rar\51.exe;C:\Documents and Settings\Administrator\桌面\dd.rar;Trojan.Click.4709;;
dd.rar\down.exe;C:\Documents and Settings\Administrator\桌面\dd.rar;Trojan.MulDrop.14980;;
dd.rar\614.exe;C:\Documents and Settings\Administrator\桌面\dd.rar;Trojan.DownLoader.45214;;
dd.rar\down2.exe;C:\Documents and Settings\Administrator\桌面\dd.rar;Trojan.MulDrop.14980;;
dd.rar;C:\Documents and Settings\Administrator\桌面;发现压缩文件中有被感染的对象;;

显示全部楼层 · 发表于 2008-4-29 22:07:23

Begin scan in 'C:\Documents and Settings\FXZ\桌面\dd.rar'
C:\Documents and Settings\FXZ\桌面\dd.rar
  [0] Archive type: RAR
--> baidu.cab
   [1] Archive type: CAB (Microsoft)
   --> Baidu.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Murlo.LV
--> ss.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> s.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Tiny.arh
  --> 51.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
--> down.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 614.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
  --> Baidu.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Murlo.LV
  --> abd.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.nra
--> down2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [WARNING] The file was ignored!

End of the scan: 2008年4月29日  22:18
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   12 Files were scanned
   10 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   2 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-29 22:34:47

信息 2008-04-29  22:34:38 您此次查毒清除了5个病毒
信息 2008-04-29  22:34:38 您此次查毒共查出5个病毒以及危险代码
信息 2008-04-29  22:34:38 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件22个
信息 2008-04-29  22:34:38 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-29  22:34:38 D:\Desktop\dd.rar\abd.exe Win32.TrojDownloader.Agent.135168 清除成功
病毒 2008-04-29  22:34:38 D:\Desktop\dd.rar\614.exe Win32.PSWTroj.OnLineGames.98304 清除成功
病毒 2008-04-29  22:34:38 D:\Desktop\dd.rar\51.exe Win32.Troj.VB.81920 清除成功
病毒 2008-04-29  22:34:38 D:\Desktop\dd.rar\s.exe Win32.TrojDownloader.Tiny.53248 清除成功
病毒 2008-04-29  22:34:38 D:\Desktop\dd.rar\ss.exe Win32.TrojDownloader.Small.49152 清除成功

[病毒样本] 10

本帖子中包含更多资源

21/4

本帖子中包含更多资源

蜘蛛报7个