查看: 2617|回复: 12
收起左侧

[病毒样本] mcafee没有报之三

[复制链接]
kingmuro
头像被屏蔽
发表于 2008-5-14 21:27:31 | 显示全部楼层 |阅读模式
感觉系统不爽,但麦咖啡没提示,随便用360一扫竟发现异常,用安博士也查出部分病毒,就是麦咖啡没反应

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
真.菲戈
发表于 2008-5-14 21:29:09 | 显示全部楼层
360还是别信了…
真.菲戈
发表于 2008-5-14 21:30:33 | 显示全部楼层
Starting the file scan:

Begin scan in 'D:\Downloads\Sample\DAY\Kafan VirList [2008.05.14]\c.rar'
D:\Downloads\Sample\DAY\Kafan VirList [2008.05.14]\c.rar
  [0] Archive type: RAR
  --> spr6.tmp
      [DETECTION] Is the Trojan horse TR/Agent.49152
  --> kqcA.tmp
      [DETECTION] Is the Trojan horse TR/Agent.49152
  --> ser.exe
      [DETECTION] Is the Trojan horse TR/BHO.bjk
  --> ser2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.mvo
  --> spr5.tmp
      [DETECTION] Is the Trojan horse TR/Agent.49152
      [NOTE]      The file was deleted!


End of the scan: 2008年5月14日  21:30
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes
Exia 该用户已被删除
发表于 2008-5-14 21:30:54 | 显示全部楼层

5

Starting the file scan:

Begin scan in 'E:\AV\kqcA.tmp'
E:\AV\kqcA.tmp
      [DETECTION] Is the Trojan horse TR/Agent.49152
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\ser.exe'
E:\AV\ser.exe
      [DETECTION] Is the Trojan horse TR/BHO.bjk
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\ser2.exe'
E:\AV\ser2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.mvo
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\spr5.tmp'
E:\AV\spr5.tmp
      [DETECTION] Is the Trojan horse TR/Agent.49152
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\spr6.tmp'
E:\AV\spr6.tmp
      [DETECTION] Is the Trojan horse TR/Agent.49152
      [NOTE]      The file was deleted!


End of the scan: 2008年5月14日  21:32
Used time: 00:12 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes
yk1234
发表于 2008-5-14 21:31:18 | 显示全部楼层
红伞
Tr/agent 49152
啊,楼上两位伞民真快
挪威的冬天
发表于 2008-5-14 21:32:38 | 显示全部楼层
信息        2008-05-14  21:32:28        您此次查毒清除了5个病毒                       
信息        2008-05-14  21:32:28        您此次查毒共查出5个病毒以及危险代码                       
信息        2008-05-14  21:32:28        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件6个                       
信息        2008-05-14  21:32:28        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-05-14  21:32:28        D:\Desktop\c.rar\spr5.tmp        Win32.Troj.DownLoaderT.yy.131072        清除成功       
病毒        2008-05-14  21:32:28        D:\Desktop\c.rar\ser2.exe        Win32.Troj.BHO.122880        清除成功       
病毒        2008-05-14  21:32:28        D:\Desktop\c.rar\ser.exe        Win32.Troj.Agent.kx.110592        清除成功       
病毒        2008-05-14  21:32:28        D:\Desktop\c.rar\kqcA.tmp        Win32.TrojDownloader.Agent.49152        清除成功       
病毒        2008-05-14  21:32:28        D:\Desktop\c.rar\spr6.tmp        Win32.Troj.DownLoaderT.yy.131072        清除成功
Palkia
发表于 2008-5-14 21:33:45 | 显示全部楼层

3

C:\Documents and Settings\Administrator\桌面\c.rar>>ser.exe        Trojan.BHO.bjk.sgkf        木马        还未处理
C:\Documents and Settings\Administrator\桌面\c.rar>>spr5.tmp        TrojanDownloader.Agent.cry.tmdl        木马        还未处理
C:\Documents and Settings\Administrator\桌面\c.rar>>spr6.tmp        TrojanDownloader.Agent.cry.mszr        木马        还未处理
kingmuro
头像被屏蔽
 楼主| 发表于 2008-5-14 21:33:51 | 显示全部楼层
各位反应真的快,我这边刚传完,那边就有回复,难道各位都是吃住在电脑旁
Palkia
发表于 2008-5-14 21:34:35 | 显示全部楼层
木马名称:Trojan-Downloader.Win32.Agent.stb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\C\SPR6.TMP
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Agent.scj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\C\KQCA.TMP
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan.Win32.BHO.tl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\C\SER2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Agent.siz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\C\SPR5.TMP
是木马程序!
已成功阻止其运行,是否要删除此文件?
qq2008
发表于 2008-5-14 21:37:26 | 显示全部楼层
清除病毒种类列表:
病毒: Trojan.Win32.Undef.fiw
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-16 08:07 , Processed in 0.136533 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表