3 Adware

显示全部楼层 · 发表于 2008-6-13 12:42:01

已刪除: 廣告軟體 not-a-virus:AdWare.Win32.AdMoke.asr 檔案: C:\Documents and Settings\kato9096\桌面\3.zip/windxp32.dll//PE_Patch.PECompact//PecBundle//PECompact
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Ejik.gu 檔案: C:\Documents and Settings\kato9096\桌面\3.zip/4074GOOGLE??讛蔓隞?exe3//NSPack

已上报一个到卡巴

显示全部楼层 · 发表于 2008-6-13 12:43:32

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\3.zip'
C:\Documents and Settings\Administrator\桌面\3.zip
  [0] Archive type: ZIP
  --> windxp32.dll
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Masot.A Backdoor server programs
--> 3147.exe3
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Masot.A Backdoor server programs
   [NOTE]    The file was deleted!

End of the scan: 2008年6月13日  12:43
Used time: 00:06 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-6-13 12:45:03

你的4074GOOGLE??讛蔓隞?exe3沒有报,你去上报吧

显示全部楼层 · 发表于 2008-6-13 12:48:03

kv 0

显示全部楼层 · 发表于 2008-6-13 12:56:00

费尔 0
小a 报

显示全部楼层 · 发表于 2008-6-13 13:01:32

版本 18.5.8071.731
病毒特征库日期 2008/6/13
开始时间： 2008/6/13 13:01
引擎：引擎A (AVK 18.4115), 引擎B (AVKB 18.305)
启发式：开启
档案文件：开启
系统区域：开启

检测系统区域...
检测以下目录和文件：
C:\Documents and Settings\祝俊杰\桌面\3.zip

对象： windxp32.dll
在压缩档案中： C:\Documents and Settings\祝俊杰\桌面\3.zip
状态：检测到病毒
病毒： not-a-virus:AdWare.Win32.AdMoke.asr (引擎A)
对象： 4074GOOGLE鐨勬伓鎰忚蒋浠?exe3
在压缩档案中： C:\Documents and Settings\祝俊杰\桌面\3.zip
状态：检测到病毒
病毒： not-a-virus:AdWare.Win32.Ejik.gu (引擎A)
对象： 3.zip
路径: C:\Documents and Settings\祝俊杰\桌面
状态：移动文件到隔离区
病毒： not-a-virus:AdWare.Win32.AdMoke.asr, not-a-virus:AdWare.Win32.Ejik.gu (引擎A)

检测执行时间： 2008/6/13 13:01
1个文件已检测
1个受感染文件
0个可疑文件被发现

显示全部楼层 · 发表于 2008-6-13 13:48:35

2008/6/13 13:49:33 http://bbs.kafan.cn/attachment.p ... ecBundle//PECompact Internet Explorer 已被拒绝: not-a-virus:AdWare.Win32.AdMoke.asr

显示全部楼层 · 发表于 2008-6-13 13:51:27

诺顿又无视。。
汗。用诺顿跑样本区真不好玩，以后就只来看看好了

显示全部楼层 · 发表于 2008-6-13 14:20:23

对象: 3147.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\3.zip
Status: 已发现病毒
病毒: Dropped:Application.Generic.9430 (BD 引擎)

显示全部楼层 · 发表于 2008-6-13 18:37:58

E:\virus\3.zip > ZIP > windxp32.dll > PECompact v2.xx - 正常
E:\virus\3.zip > ZIP > 4074GOOGLE鐨勬伓鎰忚蒋浠?exe3 - 正常
E:\virus\3.zip > ZIP > 3147.exe3 > PECompact v2.xx - 正常
E:\virus\3.zip:Zone.Identifier - 正常

[病毒样本] 3 Adware

本帖子中包含更多资源

回复 2楼红心王子的帖子

[病毒样本] 3 Adware

本帖子中包含更多资源

回复 2楼 红心王子 的帖子

回复 2楼红心王子的帖子