crypts.dll [md5:43f54a]

显示全部楼层 · 发表于 2008-5-11 04:12:38

请主意这个样本如果你的硬盘是ntfs的格式绝对不要解压出来，这个样本使用了ntfs acl，解压出来之后无法用正常途径删除
如果你无视了这条提示解压了出来，请使用最新的unlocker删除，或者想办法把文件移动到fat32分区上，就可以删除

File:	crypts.dll
Status:	INFECTED/MALWARE
MD5:	43f54a4edace096811605a398b06c6bb
Packers detected:	PE_PATCH.UPX, UPX
Bit9 reports:

Scanner results
Scan taken on 10 May 2008 20:09:51 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Downloader.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found Downloader.Generic7.LUT
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Downloader.Win32.Satray.bk
Fortinet	Found W32/Heuri.BK!tr.dldr
Ikarus	Found nothing
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.Satray.bk
NOD32	Found a variant of Win32/TrojanDownloader.Agent.BER
Norman Virus Control	Found W32/DLoader.HDEY
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Heuri-E
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-11 08:41:40

C:\Documents and Settings\Administrator\桌面\crypts.rar>>crypts.dll TrojanDownloader.Satray.bk.geku.dll 木马还未处理

显示全部楼层 · 发表于 2008-5-11 09:44:48

在 C:\Documents and Settings\Administrator\桌面\crypts.rar->crypts.dll 中发现 Adware/Clicker.fbw 病毒, 已删除

显示全部楼层 · 发表于 2008-5-11 21:09:03

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.fwa

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.43.62

显示全部楼层 · 发表于 2008-5-11 21:12:21

TO all

[病毒样本] crypts.dll [md5:43f54a]