virus

显示全部楼层 · 发表于 2008-6-4 09:36:46

6个生成的家伙。。。

显示全部楼层 · 发表于 2008-6-4 09:43:46

R:\tsople.dll - Win32/Adware.IeDefender.NDH application
R:\A1E-tmpaASI.exe - Win32/Adware.IeDefender.NDH application

显示全部楼层 · 发表于 2008-6-4 09:46:14

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus'
C:\Documents and Settings\Administrator\桌面\virus\A1E-tmpaASI.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Peregar.CG
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\svchost.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\tsople.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Peregar.CG.1
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-4 17:44:51

DrWeb 3/6

显示全部楼层 · 发表于 2008-6-4 20:48:00

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Gpigeon2007.bfr

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.22

显示全部楼层 · 发表于 2008-6-4 21:08:21

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:svchost.exe <- Trojan.Hupigon.Pv : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:A1E-tmpaASI.exe <- Trojan.Agent.Ai : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:A1E-tmpaASI.exe<DLLRES>:file0.exe <- Trojan.Agent.Ai : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:A1E-tmpaASI.exe<DLLRES>:file0.exe<UPX>:file0.exe <- Downloader.Peregar.cg : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:A1E-tmpaASI.exe<UPX>:A1E-tmpaASI.exe <- Downloader.Peregar.cg : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:A1E-tmpaASI.exe<UPX>:A1E-tmpaASI.exe<DLLRES>:file0.exe <- Trojan.Agent.Ai : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:A1E-tmpaASI.exe<UPX>:A1E-tmpaASI.exe<DLLRES>:file0.exe<UPX>:file0.exe <- Downloader.Peregar.cg : No action

Scanned objects : 13

Infected objects : 7

显示全部楼层 · 发表于 2008-6-4 21:09:01

[Found backdoor] <W32/Hupigon.J.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar->svchost.exe
[Found security risk] <W32/Virtumonde.T.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar->tmpA.tmp
[Found downloader] <W32/Downldr2.BXCO (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->A1E-tmpaASI.exe->exefile

---------------------------------------------------------------------
Scan ended: 2008-6-4, 21:08:51
Duration: 0:00:00

Scan result:

Scanned files:    8
Infected objects:    3
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] virus

本帖子中包含更多资源

10/1

ArcaVir2008

F-Prot 4.4.4