13

ck893210

扫扫

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹'
E:\AV\新建文件夹\gbppsv.js
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.iak Backdoor server programs
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\qwer.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\ro.exe
      [DETECTION] Is the Trojan horse TR/Inject.QT.1
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\wincap.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48937f0c.qua'!
E:\AV\新建文件夹\zxcv.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\access.php
  [0] Archive type: HIDDEN
  --> FIL\\\?\E:\AV\新建文件夹\access.php
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\arp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\chajian.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\fy.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\gbiehdst.js
      [DETECTION] Is the Trojan horse TR/Spy.Delf.bye
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\gbppdist.js
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月10日  18:53
Used time: 00:27 min

The scan has been done completely.

      1 Scanning directories
     13 Files were scanned
     10 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     10 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
     11 Notes

25015557	asdf.exe	458 KB	UNDER ANALYSIS
3603301	sobar.exe	502.75 KB	CLEAN

[ 本帖最后由 Exia 于 2008-5-10 18:54 编辑 ]

Palkia

在 C:\Documents and Settings\Administrator\桌面\x13\fy.exe 中发现 Backdoor/Ceckno.kw 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\x13\ro.exe 中发现 Trojan/Inject.ob 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\x13\access.php 中发现 Trojan/Agent.kcr 病毒, 已删除

郁冰兰雪

下载完可真累，发现5个！
D:\病毒样本\x13\ro.exe - 可能是 Win32/Inject 特洛伊木马 的变种
D:\病毒样本\x13\zxcv.exe - 未查明的 NewHeur_PE 病毒
D:\病毒样本\x13\arp.exe - Win32/HackTool.ArpSnoof.B 特洛伊木马
D:\病毒样本\x13\chajian.exe - Win32/TrojanDownloader.QQHelper.NFN 特洛伊木马
D:\病毒样本\x13\fy.exe - 可能是 Win32/DoS.Sypak 特洛伊木马 的变种

sam.to

已刪除: 色情程式 not-a-virus:Porn-Dialer.Win32.GBDialer.j        檔案: C:\Documents and Settings\kato9096\桌面\x13\access.php//PE-Crypt.XorPE
已刪除: 特洛伊木馬程式 Trojan.Win32.Pakes.cux        檔案: C:\Documents and Settings\kato9096\桌面\x13\arp.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Ceckno.amy        檔案: C:\Documents and Settings\kato9096\桌面\x13\fy.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Delf.bye        檔案: C:\Documents and Settings\kato9096\桌面\x13\gbiehdst.js//ASPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Dadobra.aen        檔案: C:\Documents and Settings\kato9096\桌面\x13\gbppdist.js
已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.iak        檔案: C:\Documents and Settings\kato9096\桌面\x13\gbppsv.js//ASPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.PdPinch.ggh        檔案: C:\Documents and Settings\kato9096\桌面\x13\qwer.exe
已刪除: 特洛伊木馬程式 Trojan.Win32.Inject.qt        檔案: C:\Documents and Settings\kato9096\桌面\x13\ro.exe


to KL

eacocn

敢解压缩吗？敢解压缩后在扫描马？？？

sam.to

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

挪威的冬天

有几个杀软支持压缩分卷扫描的? 还不都是解压扫的

信息        2008-05-10  19:34:24        您此次查毒隔离了2个文件                       
信息        2008-05-10  19:34:24        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-05-10  19:34:24        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件21个                       
信息        2008-05-10  19:34:24        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-05-10  19:34:24        D:\Desktop\x13\ro.exe        Win32.Troj.Inject.qt.39936        隔离成功       
病毒        2008-05-10  19:34:24        D:\Desktop\x13\fy.exe        Win32.Troj.DoS.311296        隔离成功

qigang

RS20.43.52未杀！

The file 'asdf.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.