这两天新收的样本，6个，md5命名

显示全部楼层 · 发表于 2008-5-29 12:01:00

这两天新收的样本，6个过卡巴，昨天的病毒库...

不好意思，上传错了，是已知的。稍后补充

[ 本帖最后由 fengxing 于 2008-5-29 12:03 编辑 ]

显示全部楼层 · 发表于 2008-5-29 12:03:57

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹'
E:\AV\新建文件夹\6b208869d9c139fae7dd957b8bc9a633.bin(Worm.Win32.AutoRun.dwp).KAS
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\12bc668b66ad2760f171294ca3a444fb.bin(Trojan-PSW.Win32.QQPass.btc).KAS
   [DETECTION] Is the Trojan horse TR/PSW.QQpass.btc
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\2ae9ad6c0abbd4dad9d1f45efbb43f96.bin(Trojan-Downloader.Win32.Agent.qvf).KAS
   [DETECTION] Is the Trojan horse TR/Drop.Agent.zaf
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\282a1ba7209eba17cefaa22002558d5f.bin(Trojan-Downloader.Win32.Banload.mzf).KAS
   [DETECTION] Is the Trojan horse TR/Dldr.Banload.mzf
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\a3b8319abff0a9fe34df7b0b315ecaeb.bin(Trojan-Downloader.Win32.Banload.mzf).KAS
   [DETECTION] Is the Trojan horse TR/Dldr.Banload.mzf
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\9b8105e11134bb7d414ddc384ea2324e.bin(Worm.Win32.AutoRun.dvp).KAS
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!

End of the scan: 2008年5月29日  12:06
Used time: 00:11 min

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   6 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   6 Notes

显示全部楼层 · 发表于 2008-5-29 12:06:12

已刪除: 病毒 Worm.Win32.AutoRun.dwp 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/6b208869d9c139fae7dd957b8bc9a633.bin(Worm.Win32.AutoRun.dwp).KAS
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.btc 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/12bc668b66ad2760f171294ca3a444fb.bin(Trojan-PSW.Win32.QQPass.btc).KAS
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.qvf 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/2ae9ad6c0abbd4dad9d1f45efbb43f96.bin(Trojan-Downloader.Win32.Agent.qvf).KAS
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Banload.mzf 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/282a1ba7209eba17cefaa22002558d5f.bin(Trojan-Downloader.Win32.Banload.mzf).KAS
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Banload.mzf 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/a3b8319abff0a9fe34df7b0b315ecaeb.bin(Trojan-Downloader.Win32.Banload.mzf).KAS
已刪除: 病毒 Worm.Win32.AutoRun.dvp 檔案: C:\Documents and Settings\kato9096\桌面\6.rar/9b8105e11134bb7d414ddc384ea2324e.bin(Worm.Win32.AutoRun.dvp).KAS

沒有不报

显示全部楼层 · 发表于 2008-5-29 12:06:28

信息 2008-05-29  12:06:10 您此次查毒清除了5个病毒
信息 2008-05-29  12:06:10 您此次查毒共查出5个病毒以及危险代码
信息 2008-05-29  12:06:10 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件7个
信息 2008-05-29  12:06:10 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-29  12:06:10 D:\Desktop\6.rar\9b8105e11134bb7d414ddc384ea2324e.bin(Worm.Win32.AutoRun.dvp).KAS Win32.Troj.PopHot.c.44032 清除成功
病毒 2008-05-29  12:06:10 D:\Desktop\6.rar\a3b8319abff0a9fe34df7b0b315ecaeb.bin(Trojan-Downloader.Win32.Banload.mzf).KAS Win32.TrojDownloader.Banload.41985 清除成功
病毒 2008-05-29  12:06:10 D:\Desktop\6.rar\282a1ba7209eba17cefaa22002558d5f.bin(Trojan-Downloader.Win32.Banload.mzf).KAS Win32.TrojDownloader.Banload.41985 清除成功
病毒 2008-05-29  12:06:10 D:\Desktop\6.rar\12bc668b66ad2760f171294ca3a444fb.bin(Trojan-PSW.Win32.QQPass.btc).KAS Win32.Troj.QQPassT.va.48260 清除成功
病毒 2008-05-29  12:06:10 D:\Desktop\6.rar\6b208869d9c139fae7dd957b8bc9a633.bin(Worm.Win32.AutoRun.dwp).KAS Win32.Troj.PopHot.c.44544 清除成功

显示全部楼层 · 发表于 2008-5-29 12:06:55

检测1个

显示全部楼层 · 发表于 2008-5-29 12:09:43

全滅

显示全部楼层 · 发表于 2008-5-29 13:35:09

:\病毒测试\临时解压\12bc668b66ad2760f171294ca3a444fb.bin(Trojan-PSW.Win32.QQPass.btc).KAS - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
D:\病毒测试\临时解压\282a1ba7209eba17cefaa22002558d5f.bin(Trojan-Downloader.Win32.Banload.mzf).KAS - 特征码 'Trojan-Downloader.Win32.Banload.mzf' 被发现
D:\病毒测试\临时解压\2ae9ad6c0abbd4dad9d1f45efbb43f96.bin(Trojan-Downloader.Win32.Agent.qvf).KAS
D:\病毒测试\临时解压\6b208869d9c139fae7dd957b8bc9a633.bin(Worm.Win32.AutoRun.dwp).KAS - 特征码 'Virus.Win32.Delf.HNJ' 被发现
D:\病毒测试\临时解压\9b8105e11134bb7d414ddc384ea2324e.bin(Worm.Win32.AutoRun.dvp).KAS - 特征码 'Virus.Win32.Delf.HNJ' 被发现
D:\病毒测试\临时解压\a3b8319abff0a9fe34df7b0b315ecaeb.bin(Trojan-Downloader.Win32.Banload.mzf).KAS - 特征码 'Trojan-Downloader.Win32.Banload.mzf' 被发现

6 文件被扫描
(0 压缩档 0 文件)
5 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.561

显示全部楼层 · 发表于 2008-5-29 13:39:00

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\6.rar<RAR>:6b208869d9c139fae7dd957b8bc9a633.bin(Worm.Win32.AutoRun.dwp).KAS <- Worm.Autorun.Dwp : No action
C:\Documents and Settings\All Users\Documents\Test\6.rar<RAR>:12bc668b66ad2760f171294ca3a444fb.bin(Trojan-PSW.Win32.QQPass.btc).KAS <- Trojan.Psw.Qqpass.Btc : No action
C:\Documents and Settings\All Users\Documents\Test\6.rar<RAR>:282a1ba7209eba17cefaa22002558d5f.bin(Trojan-Downloader.Win32.Banload.mzf).KAS <- Trojan.Downloader.Banload.Mzf : No action
C:\Documents and Settings\All Users\Documents\Test\6.rar<RAR>:a3b8319abff0a9fe34df7b0b315ecaeb.bin(Trojan-Downloader.Win32.Banload.mzf).KAS <- Trojan.Downloader.Banload.Mzf : No action

Scanned objects : 7

Infected objects : 4

显示全部楼层 · 发表于 2008-5-29 13:39:25

[Found virus] <W32/InfoStealer!Generic (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\6.rar->12bc668b66ad2760f171294ca3a444fb.bin(Trojan-PSW.Win32.QQPass.btc).KAS

---------------------------------------------------------------------
Scan ended: 2008-5-29, 13:39:04
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-29 20:54:40

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Win32.Autorun.dut
病毒： Worm.Win32.PaBug.hf

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.46.32

[病毒样本] 这两天新收的样本，6个，md5命名

本帖子中包含更多资源

6

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

浏览过的版块