Four Pictures

显示全部楼层 · 发表于 2008-5-30 23:26:24

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Tibs.jfr

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.46.42

显示全部楼层 · 发表于 2008-5-30 23:33:40

25032624    tibs.jpg    25.36 KB    UNDER ANALYSIS
25032625    tool.jpg    25.13 KB    UNDER ANALYSIS
25032626    proxy.jpg    25.56 KB    UNDER ANALYSIS
25032627    winlogon.jpg    43.37 KB    UNDER ANALYSIS

显示全部楼层 · 发表于 2008-5-30 23:38:46

已删除：病毒 Email-Worm.Win32.Zhelatin.xa 文件　: G:\Temp\virus.rar/tibs.jpg
已删除：病毒 Email-Worm.Win32.Zhelatin.xa 文件　: G:\Temp\virus.rar/tool.jpg
已删除：病毒 Email-Worm.Win32.Zhelatin.xa 文件　: G:\Temp\virus.rar/proxy.jpg
已删除：病毒 Email-Worm.Win32.Zhelatin.xa 文件　: G:\Temp\virus.rar/winlogon.jpg

显示全部楼层 · 发表于 2008-5-31 10:25:05

扫描系统区域...
扫描所选择的目录和文件...
对象: tibs.jpg
在压缩档案里: F:\virus.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Tibs.GYU (BD 引擎)
对象: tool.jpg
在压缩档案里: F:\virus.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Tibs.GYU (BD 引擎)
对象: proxy.jpg
在压缩档案里: F:\virus.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Tibs.GYU (BD 引擎)
对象: winlogon.jpg
在压缩档案里: F:\virus.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Tibs.GYU (BD 引擎)

显示全部楼层 · 发表于 2008-5-31 10:35:42

诺顿全杀

显示全部楼层 · 发表于 2008-5-31 10:40:20

我的P版红伞ALL PASS

显示全部楼层 · 发表于 2008-5-31 13:32:52

2楼已上报，等结果

显示全部楼层 · 发表于 2008-6-2 15:18:21

Filename Result
tibs.jpg    MALWARE

The file 'tibs.jpg' has been determined to be 'MALWARE'. Our analysts named the threat Worm/Zhelatin.XA.42. The term "WORM/" denotes a worm that is able to spread itself for instance over the Internet (using eMail, peer-to-peer networks, IRC networks etc.).Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.

Filename Result
tool.jpg    MALWARE

The file 'tool.jpg' has been determined to be 'MALWARE'. Our analysts named the threat Worm/Zhelatin.XA.43. The term "WORM/" denotes a worm that is able to spread itself for instance over the Internet (using eMail, peer-to-peer networks, IRC networks etc.).Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.

Filename Result
proxy.jpg    MALWARE

The file 'proxy.jpg' has been determined to be 'MALWARE'. Our analysts named the threat Worm/Zhelatin.XA.44. The term "WORM/" denotes a worm that is able to spread itself for instance over the Internet (using eMail, peer-to-peer networks, IRC networks etc.).Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.

Filename Result
winlogon.jpg    MALWARE

The file 'winlogon.jpg' has been determined to be 'MALWARE'. Our analysts named the threat Worm/Zhelatin.XA.45. The term "WORM/" denotes a worm that is able to spread itself for instance over the Internet (using eMail, peer-to-peer networks, IRC networks etc.).Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.

显示全部楼层 · 发表于 2008-6-2 17:05:30

* avast! Report
* This file is generated automatically
*
* Task 'Simple user interface' used
* Started on Monday, June 02, 2008
* VPS: 080601-0, 06/01/2008
*

C:\Documents and Settings\Limited User\Desktop\virus\proxy.jpg [L] Win32:Zhelatin-CVY [Wrm] (0)
C:\Documents and Settings\Limited User\Desktop\virus\tibs.jpg [L] Win32:Zhelatin-CVY [Wrm] (0)
C:\Documents and Settings\Limited User\Desktop\virus\tool.jpg [L] Win32:Zhelatin-CVY [Wrm] (0)
C:\Documents and Settings\Limited User\Desktop\virus\winlogon.jpg [L] Win32:Zhelatin-CVY [Wrm] (0)
Infected files: 4
Total files: 4
Total folders: 1
Total size: 119.4 KB

*
* Task stopped: Monday, June 02, 2008
* Run-time was 9 second(s)

显示全部楼层 · 发表于 2008-6-2 17:16:13

江民飘~

[病毒样本] Four Pictures

本帖子中包含更多资源

回复 6楼 paul1985 的帖子