今日的一包

显示全部楼层 · 发表于 2008-5-19 10:11:42

各位enjoy
这里没别人有能力提供国外的批量免杀吗？

显示全部楼层 · 发表于 2008-5-19 10:18:58

2008-5-19 10:13:14 xx 3024 Sign of "Win32:Vapsup-EB [Adw]" has been found in "C:\Documents and Settings\xx\桌面\WINDOWS.rar\WINDOWS\fvowketqfgq.dll" file.
2008-5-19 10:13:20 xx 3024 Sign of "Win32:Small-KAM [Trj]" has been found in "C:\Documents and Settings\xx\桌面\WINDOWS.rar\WINDOWS\msprint.exe\[PECompact]\[Embedded#08a00]\[PECompact]" file.
2008-5-19 10:13:23 xx 3024 Sign of "Win32:Agent-VGV [Wrm]" has been found in "C:\Documents and Settings\xx\桌面\WINDOWS.rar\WINDOWS\ojN88.sys" file.
2008-5-19 10:13:26 xx 3024 Sign of "Win32:Agent-LTS [Trj]" has been found in "C:\Documents and Settings\xx\桌面\WINDOWS.rar\WINDOWS\vbksrofa.dll" file

显示全部楼层 · 发表于 2008-5-19 10:19:42

Begin scan in 'C:\Documents and Settings\haha\桌面\WINDOWS.rar'
C:\Documents and Settings\haha\桌面\WINDOWS.rar
  [0] Archive type: RAR
  --> WINDOWS\.tt2A0.tmp.vbs
   [DETECTION] Contains detection pattern of the VBS script virus VBS/Agent.1002
  --> WINDOWS\ctfmona.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> WINDOWS\ddcCUoml.dll
   [DETECTION] Is the Trojan horse TR/Vundo.Gen
  --> WINDOWS\fvowketqfgq.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
--> WINDOWS\msprint.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Agent.fwi
      --> Object
         [DETECTION] Contains detection pattern of the dropper DR/Dldr.Zlob.ABMP.6
--> WINDOWS\ojN88.sys
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> WINDOWS\pvnsmfor.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
  --> WINDOWS\stdcons.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> WINDOWS\vbksrofa.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
  --> WINDOWS\WinCtrl32.dll
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    A backup was created as '487ee3f0.qua'  ( QUARANTINE )

End of the scan: 2008年5月19日  10:19
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   14 Files were scanned
   12 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-5-19 10:21:06

AVG x8

C:\Documents and Settings\Limited User\Desktop\WINDOWS\ctfmona.exe; Trojan horse Downloader.Generic7.NID; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\WINDOWS\emxa.exe; Trojan horse Downloader.Adload.JJ; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\WINDOWS\fvowketqfgq.dll; Trojan horse Downloader.Adload.IR; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\WINDOWS\msprint.exe; Trojan horse Generic10.ZKG; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\WINDOWS\ojN88.sys; Trojan horse BackDoor.Ntrootkit.AM; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\WINDOWS\pvnsmfor.dll; Trojan horse Downloader.Zlob.SE; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\WINDOWS\stdcons.exe; Trojan horse Downloader.Generic7.NJI; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\WINDOWS\WinCtrl32.dll; Trojan horse Downloader.Generic7.NTE; Moved to Virus Vault

显示全部楼层 · 发表于 2008-5-19 10:30:27

C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\ctfmona.exe - Win32/TrojanDownloader.FakeAlert.CW 特洛伊木马
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\msprint.exe - 未查明的 NewHeur_PE 病毒
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\ojN88.sys - Win32/TrojanDownloader.Wigon.O 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\stdcons.exe - Win32/TrojanDownloader.Wigon.P 特洛伊木马

显示全部楼层 · 发表于 2008-5-19 10:32:24

kis 8.0.0.357

显示全部楼层 · 发表于 2008-5-19 10:58:11

对象: WINDOWS\.tt2A0.tmp.vbs
在压缩档案里: F:\WINDOWS.rar
Status: 已发现病毒
病毒: Application.CleanSystemRestore.A (BD 引擎)
对象: WINDOWS\ctfmona.exe
在压缩档案里: F:\WINDOWS.rar
Status: 已发现病毒
病毒: Trojan.Peed.JIK (BD 引擎)
对象: WINDOWS\msprint.exe
在压缩档案里: F:\WINDOWS.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdld.811F70D7 (BD 引擎)
对象: WINDOWS\ojN88.sys
在压缩档案里: F:\WINDOWS.rar
Status: 已发现病毒
病毒: Trojan.Dropper.Cutwail.D (BD 引擎)
对象: WINDOWS\WinCtrl32.dll
在压缩档案里: F:\WINDOWS.rar
Status: 已发现病毒
病毒: Trojan.Dropper.Kobcka.C (BD 引擎)

显示全部楼层 · 发表于 2008-5-19 13:21:29

蜘蛛：
WINDOWS.rar\WINDOWS\ctfmona.exe;C:\Documents and Settings\Administrator\桌面\WINDOWS.rar;Trojan.Fakealert.569;;
msprint.exe\data002;C:\Documents and Settings\Administrator\桌面\WINDOWS.rar\WINDOWS\msprint.exe;Trojan.MulDrop.13008;;
msprint.exe\data003;C:\Documents and Settings\Administrator\桌面\WINDOWS.rar\WINDOWS\msprint.exe;Trojan.Click.18687;;
WINDOWS\msprint.exe;C:\Documents and Settings\Administrator\桌面\WINDOWS.rar\WINDOWS;发现压缩文件中有被感染的对象;;
WINDOWS.rar\WINDOWS\stdcons.exe;C:\Documents and Settings\Administrator\桌面\WINDOWS.rar;Trojan.Rntm.6;;
WINDOWS.rar;C:\Documents and Settings\Administrator\桌面;发现压缩文件中有被感染的对象;已删除。;

显示全部楼层 · 发表于 2008-5-19 14:41:45

好像只有卡巴和AVG能查到8个

显示全部楼层 · 发表于 2008-5-19 15:44:03

关于AVK防病毒软件的病毒扫描
版本 17.0.6282
从病毒数据库签名 11.02.2008
开始时间: 19.05.2008 15:42
引擎: AVP引擎 (AVK 18.2735), Avast/BD引擎 (AVKB 18.265)
启发: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
扫描文件 C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
对象: WINDOWS\fvowketqfgq.dll
  在压缩档案里: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
状态: 已发现病毒
  病毒: Win32:Vapsup-EB [Adw] (Avast/BD引擎)
对象: WINDOWS\msprint.exe\[PECompact]
  在压缩档案里: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
状态: 已发现病毒
  病毒: Win32:Agent-UDD [Trj] (Avast/BD引擎)
对象: WINDOWS\ojN88.sys
  在压缩档案里: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
状态: 已发现病毒
  病毒: Win32:Agent-VGV [Wrm] (Avast/BD引擎)
对象: WINDOWS\vbksrofa.dll
  在压缩档案里: C:\Documents and Settings\Administrator\桌面\WINDOWS.rar
状态: 已发现病毒
  病毒: Win32:Agent-LTS [Trj] (Avast/BD引擎)
对象: WINDOWS.rar
路径: C:\Documents and Settings\Administrator\桌面
状态: 已发现病毒
  病毒: Win32:Vapsup-EB [Adw], Win32:Agent-UDD [Trj], Win32:Agent-VGV [Wrm], Win32:Agent-LTS [Trj] (Avast/BD引擎)
分析完成: 19.05.2008 15:42
已扫描 1 个文件
已发现 1 个感染文件

[病毒样本] 今日的一包

本帖子中包含更多资源

本帖子中包含更多资源