stdcons.exe [md5:b7f8d6e]

显示全部楼层 · 发表于 2008-5-17 08:54:27

File:	stdcons.exe
Status:	INFECTED/MALWARE
MD5:	b7f8d6e2ac20ae3a5ec1adb5c4b0a11a
Packers detected:	-

Scanner results
Scan taken on 17 May 2008 00:53:06 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Dropper.Gen
ArcaVir	Found Trojan.Downloader.Mutant.Xp
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found Trojan.Rntm.6
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found Trojan-Dropper
Kaspersky Anti-Virus	Found nothing
NOD32	Found Win32/TrojanDownloader.Wigon.P
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Generic-A
VirusBuster	Found Trojan.DR.Pandex.Gen.4
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-17 09:04:38

原帖由 mofunzone 于 2008-5-17 08:54 发表
File: stdcons.exe Status: INFECTED/MALWARE
MD5: b7f8d6e2ac20ae3a5ec1adb5c4b0a11a Packers det ...

运行到关键时刻。。

抓了两个

显示全部楼层 · 发表于 2008-5-17 09:08:11

Starting the file scan:

Begin scan in 'E:\AV\WinCtrl32.rar'
E:\AV\WinCtrl32.rar
  [0] Archive type: RAR
  --> WinCtrl32.dll
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\cjP74.rar'
E:\AV\cjP74.rar
  [0] Archive type: RAR
--> cjP74.sys
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-17 10:37:00

蜘蛛C:\Documents and Settings\LX\桌面\stdcons\stdcons.exe - 已感染 Trojan.Rntm.6
2楼第二个

找不到所请求的 URL

在尝试检索 URL 时:

http://bbs.kafan.cn/attachment.php?aid=
265385&k=6389310b9ee5c16bbc44074a3a89281
4&t=1210991683

遇到了下列错误:

所请求的对象已被感染了下列病毒: Trojan-Dropper.Win32.Agent.ror

[ 本帖最后由 lx1234 于 2008-5-17 10:38 编辑 ]

显示全部楼层 · 发表于 2008-5-17 10:43:24

显示全部楼层 · 发表于 2008-5-17 12:09:56

TO KL

显示全部楼层 · 发表于 2008-5-17 13:15:03

C:\Documents and Settings\Administrator\桌面\stdcons.rar>>stdcons.exe Trojan.Agent.acvu.yqnd 木马还未处理

显示全部楼层 · 发表于 2008-5-17 13:19:10

C:\Documents and Settings\Administrator\桌面\WinCtrl32.rar>>WinCtrl32.dll TrojanDownloader.Mutant.yf.xdgy.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\cjP74.rar>>cjP74.sys TrojanDropper.Agent.ror.qdph 木马还未处理

显示全部楼层 · 发表于 2008-5-17 15:50:49

[Found security risk] <W32/Agent.BD.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\cjP74.rar->cjP74.sys
[Found downloader] <W32/Downloader.Z1.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\WinCtrl32.rar->WinCtrl32.dll

---------------------------------------------------------------------
Scan ended: 2008-5-17, 15:50:37
Duration: 0:00:06

Scan result:

Scanned files:    7
Infected objects:    2
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-17 15:51:05

TO AB

[病毒样本] stdcons.exe [md5:b7f8d6e]

本帖子中包含更多资源

本帖子中包含更多资源

回复 2楼 Joker 的帖子

本帖子中包含更多资源

回复 2楼 Joker 的帖子

F-Prot 6.0.9.0