[病毒样本] 10

显示全部楼层 · 发表于 2008-5-23 19:04:15

C:\Documents and Settings\桌面\a\1.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\2008-5-22__70AB5.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\2008-5-22__84904.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\2008-5-22__B94E1.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\2008-5-22__CC97.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acru.4
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\6.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.128
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\down.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\down0.exe
   [DETECTION] Is the Trojan horse TR/Agent.12288.E
   [NOTE]    The file was deleted!
C:\Documents and Settings\桌面\a\install.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
   [NOTE]    The file was deleted!
余下一个，上报。

显示全部楼层 · 发表于 2008-5-23 19:11:11

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\a.rar<RAR>:2008-5-22__B94E1.exe<UPack>:2008-5-22__B94E1.exe <- Variant:Trojan.Agent.Fb : No action
C:\Documents and Settings\All Users\Documents\Test\a.rar<RAR>:2008-5-22__CC97.exe <- Trojan.Psw.Onlinegames.Acru : No action
C:\Documents and Settings\All Users\Documents\Test\a.rar<RAR>:down.exe <- Worm.Downloader.Jn : No action
C:\Documents and Settings\All Users\Documents\Test\a.rar<RAR>:down.exe<UPack>:down.exe <- Variant:Trojan.Agent.Fb : No action

Scanned objects : 16

Infected objects : 4

显示全部楼层 · 发表于 2008-5-23 19:12:09

[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\a.rar->install.exe
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\a.rar->1.exe
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\a.rar->2008-5-22__70AB5.exe
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\a.rar->2008-5-22__84904.exe
[Found backdoor] <W32/Rbot.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\a.rar->2008-5-22__B94E1.exe
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\a.rar->2008-5-22__CC97.exe->(embedded)->(Klone.AF)
[Found possible virus] <W32/Trojan-Dlr-SysWrt-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\a.rar->down0.exe
[Found Trojan] <W32/Trojan2.ASQN (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\a.rar->down.exe

---------------------------------------------------------------------
Scan ended: 2008-5-23, 19:11:55
Duration: 0:00:31

Scan result:

Scanned files:    6
Infected objects:    8
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-24 13:58:31

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.Upack.a
病毒： Trojan.PSW.Win32.GameOL.nom
病毒： Trojan.DL.Win32.Small.czg
病毒： Trojan.DL.Win32.Mnless.nv
病毒： Trojan.Win32.Edog.ag

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.45.50

显示全部楼层 · 发表于 2008-5-24 14:15:54

已删除: 病毒 Heur.StartPage (变种) 文件: F:\Download\a.rar/iem.exe
已删除: 木马程序 Trojan-Clicker.Win32.Delf.hy 文件: F:\Download\a.rar/install.exe//ASPack
已删除: 木马程序 Trojan-Spy.Win32.Pophot.baa 文件: F:\Download\a.rar/1.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ajbs 文件: F:\Download\a.rar/6.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-Spy.Win32.Pophot.baa 文件: F:\Download\a.rar/2008-5-22__70AB5.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-Spy.Win32.Pophot.baa 文件: F:\Download\a.rar/2008-5-22__84904.exe//PE_Patch//UPack
已删除: 病毒 Worm.Win32.Downloader.lv 文件: F:\Download\a.rar/2008-5-22__B94E1.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.acru 文件: F:\Download\a.rar/2008-5-22__CC97.exe//NSPack
已删除: 木马程序 Trojan-Downloader.Win32.Injecter.dk 文件: F:\Download\a.rar/down0.exe
已删除: 病毒 Worm.Win32.Downloader.jn 文件: F:\Download\a.rar/down.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-5-24 14:29:19

信息 2008-05-24  14:29:08 您此次查毒清除了9个病毒
信息 2008-05-24  14:29:08 您此次查毒共查出9个病毒以及危险代码
信息 2008-05-24  14:29:08 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件17个
信息 2008-05-24  14:29:08 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-24  14:29:08 D:\Desktop\a.rar\down.exe Win32.Troj.DownLoaderT.hu.147456 清除成功
病毒 2008-05-24  14:29:08 D:\Desktop\a.rar\down0.exe Win32.Troj.Agent.de.12288 清除成功
病毒 2008-05-24  14:29:08 D:\Desktop\a.rar\2008-5-22__CC97.exe Win32.PSWTroj.OnLineGames.167936 清除成功
病毒 2008-05-24  14:29:08 D:\Desktop\a.rar\2008-5-22__B94E1.exe Worm.Downloader.lv.135168 清除成功
病毒 2008-05-24  14:29:07 D:\Desktop\a.rar\2008-5-22__84904.exe Win32.Hack.UpackT.a.15981 清除成功
病毒 2008-05-24  14:29:07 D:\Desktop\a.rar\2008-5-22__70AB5.exe Win32.Hack.UpackT.a.15981 清除成功
病毒 2008-05-24  14:29:07 D:\Desktop\a.rar\6.exe Win32.Troj.OnlineGameT.fd.49424 清除成功
病毒 2008-05-24  14:29:07 D:\Desktop\a.rar\1.exe Win32.Hack.UpackT.a.15981 清除成功
病毒 2008-05-24  14:29:07 D:\Desktop\a.rar\install.exe Win32.Troj.StartPage.ev.1511424 清除成功

显示全部楼层 · 发表于 2008-5-25 16:14:31

AVK9

[病毒样本] 10

ArcaVir2008

F-Prot 4.4.4

18/7