质量不好

显示全部楼层 · 发表于 2008-5-19 20:21:56

两个问题，ls诺顿也参加样本测试了，呵呵，二，to kl什么意思？卡巴能杀掉的

显示全部楼层 · 发表于 2008-5-19 20:23:48

to kl=上报卡巴

显示全部楼层 · 发表于 2008-5-19 20:40:11

信息 2008-05-19  20:39:41 您此次查毒清除了3个病毒
信息 2008-05-19  20:39:41 您此次查毒共查出3个病毒以及危险代码
信息 2008-05-19  20:39:41 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件10个
信息 2008-05-19  20:39:41 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-19  20:39:41 C:\Documents and Settings\Administrator\桌面\桌面.zip\images.php Win32.Hack.MorphineT.a.45056 清除成功
病毒 2008-05-19  20:39:40 C:\Documents and Settings\Administrator\桌面\桌面.zip\images(3).php Win32.Hack.MorphineT.a.45056 清除成功
病毒 2008-05-19  20:39:40 C:\Documents and Settings\Administrator\桌面\桌面.zip\images(2).php Win32.Hack.MorphineT.a.45056 清除成功

显示全部楼层 · 发表于 2008-5-19 20:40:52

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:images(2).php <- Suspicious.Morphined : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:images(3).php <- Suspicious.Morphined : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:images.php <- Suspicious.Morphined : No action

Scanned objects : 5

Infected objects : 3
ArcaVir的命名感觉

显示全部楼层 · 发表于 2008-5-19 20:41:41

[Found downloader]    <W32/Downloader.N.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\桌面.zip->images(2).php->(Morphine)
[Found possible backdoor]    <W32/Heuristic-324!Eldorado (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\桌面.zip->images(3).php->(Morphine)
[Found possible virus]    <W32/Threat-HLLSI-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\桌面.zip->images(4).php->(embedded)->(UPX)
[Found possible security risk]    <W32/Heuristic-210!Eldorado (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\桌面.zip->images.php->(Morphine)

---------------------------------------------------------------------
Scan ended: 2008-5-19, 20:41:23
Duration: 0:00:01

Scan result:

Scanned files:       6
Infected objects:    4
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-20 01:44:20

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\桌面.zip'
C:\Documents and Settings\morgan\My Documents\
  桌面.zip
[0] Archive type: ZIP
--> images(2).php
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
--> images(3).php
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
   --> images(4).php
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
         [3] Archive type: Runtime Packed
         --> Object
--> images.php
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
   [NOTE]    The file was deleted!

End of the scan: 2008年5月19日  10:44
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   5 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-5-20 02:48:51

华丽的miss

显示全部楼层 · 发表于 2008-5-20 20:18:05

McAfee    images.php  New Malware.bl
               images_2_.php  New Poly Win32
               images_3_.php  New Poly Win32
               images_4_.php  Downloader-ASL

显示全部楼层 · 发表于 2008-5-20 23:03:29

images(2).php - Email-Worm.Win32.Bagle.yl,
images(3).php - Trojan-Proxy.Win32.Daemonize.kk,
images.php - Email-Worm.Win32.Bagle.yk

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.
[:1:]

[病毒样本] 质量不好

回复 11楼 sqsszzq 的帖子

ArcaVir2008

F-Prot 4.44