[病毒样本] 4

显示全部楼层 · 发表于 2008-5-1 13:41:06

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\4'
C:\Documents and Settings\Administrator\My Documents\4\
  ddos.php
   [DETECTION] Is the Trojan horse TR/Agent.ldh
   [NOTE]    The file was deleted!
  mffgpddqes.php
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  yzznabofpg.php
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Small.dnw Backdoor server programs
   [NOTE]    The file was deleted!
  zwjabb.php
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!

End of the scan: 2008年4月30日  22:41
Used time: 00:04 min

The scan has been done completely.

   1 Scanning directories
   4 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   4 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   4 Notes

显示全部楼层 · 发表于 2008-5-1 14:22:20

4.rar\mffgpddqes.php;C:\Documents and Settings\Administrator\桌面\4.rar;Trojan.Click.origin;;
4.rar\zwjabb.php;C:\Documents and Settings\Administrator\桌面\4.rar;BackDoor.Bulknet.185;;
4.rar\yzznabofpg.php;C:\Documents and Settings\Administrator\桌面\4.rar;Trojan.DownLoader.47443;;
4.rar;C:\Documents and Settings\Administrator\桌面;发现压缩文件中有被感染的对象;;

显示全部楼层 · 发表于 2008-5-1 14:39:33

显示全部楼层 · 发表于 2008-5-1 14:46:11

木马名称:Backdoor.Win32.Small.aak

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\YZZNABOFPG.PHP
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-5-1 19:02:50

RS20.42.30未杀！

显示全部楼层 · 发表于 2008-5-1 19:30:41

Scan Log
Version of virus signature database: 3068 (20080501)
Date: 2008/5/1 Time: 19:30:01
Scanned disks, folders and files: G:\v\4.rar
G:\v\4.rar » RAR » mffgpddqes.php - probably a variant of Win32/TrojanDownloader.Agent.BER trojan - was a part of the deleted object
G:\v\4.rar » RAR » zwjabb.php - is OK
G:\v\4.rar » RAR » yzznabofpg.php - is OK
G:\v\4.rar » RAR » ddos.php » UPX v12_m2 - is OK
Number of scanned objects: 4
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 19:30:05 Total scanning time: 4 sec (00:00:04)

显示全部楼层 · 发表于 2008-5-1 19:31:27

C:\Documents and Settings\Administrator\桌面\4.rar>>ddos.php Trojan.Agent.ldh.xhnn 木马还未处理
C:\Documents and Settings\Administrator\桌面\4.rar>>mffgpddqes.php TrojanDownloader.Injecter.pf.pviz 木马还未处理
C:\Documents and Settings\Administrator\桌面\4.rar>>yzznabofpg.php Backdoor.Small.dnw.siqs 后门还未处理
C:\Documents and Settings\Administrator\桌面\4.rar>>zwjabb.php TrojanDownloader.Agent.nwn.jvns 木马还未处理

显示全部楼层 · 发表于 2008-5-1 19:45:56

D:\download\4ge.rar>>mffgpddqes.php TrojanDownloader.Injecter.pf.pviz 木马还未处理
D:\download\4ge.rar>>zwjabb.php TrojanDownloader.Agent.nwn.jvns 木马还未处理
D:\download\4ge.rar>>yzznabofpg.php Backdoor.Small.dnw.siqs 后门还未处理
D:\download\4ge.rar>>ddos.php Trojan.Agent.ldh.xhnn 木马还未处理

[病毒样本] 4

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

7/0