[病毒样本] 13

显示全部楼层 · 发表于 2008-6-16 23:37:52

The scan has been done completely.

   0 Scanning directories
   13 Files were scanned
   10 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   10 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   0 Archives were scanned
   0 Warnings
   10 Notes

已上报

25048641    cid_store.dat    267 Byte    UNDER ANALYSIS
25048642    FNTCACHE.DAT    1.52 MB    UNDER ANALYSIS
24581    wpa.dbl    2.08 KB    KNOWN CLEAN

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajqc 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\apzhbtde.dll
已刪除: 特洛伊木馬程式 Trojan.Win32.Monderb.gen 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\ddcBRllK.dll
已刪除: 特洛伊木馬程式 Trojan.Win32.Monder.gen 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\efcCtqoN.dll//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiqd 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\mndhddwd.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.alne 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\nicozftp00.dll//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Monder.gen 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\uyrteagpdd.dll//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.affc 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\yxcschlp.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aowj 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\木马样本1.exe2//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.anyp 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK\木马样本2.exe2//PE_Patch.UPX//UPX
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.anyp 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/木马样本2.exe2//PE_Patch.UPX//UPX
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajqc 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/apzhbtde.dll
已偵測: 特洛伊木馬程式 Trojan.Win32.Monderb.gen 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/ddcBRllK.dll
已偵測: 特洛伊木馬程式 Trojan.Win32.Monder.gen 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/efcCtqoN.dll//PE_Patch
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiqd 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/mndhddwd.dll
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.alne 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/nicozftp00.dll//UPack
已偵測: 特洛伊木馬程式 Trojan.Win32.Monder.gen 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/uyrteagpdd.dll//PE_Patch
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.affc 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/yxcschlp.dll
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aowj 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part1.rar/木马样本1.exe2//PE_Patch.UPX//UPX
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aowj 檔案: C:\Documents and Settings\kato9096\桌面\ddcBRllK\ddcBRllK.part2.rar

19个

已上报卡巴(有很多刪不到???)

[ 本帖最后由 kato9096 于 2008-6-16 23:44 编辑 ]

显示全部楼层 · 发表于 2008-6-17 00:54:45

无法识别的~~~!!

都已上传卡巴~!!

显示全部楼层 · 发表于 2008-6-17 01:22:56

nod found 5

显示全部楼层 · 发表于 2008-6-17 07:57:32

miss 4..

显示全部楼层 · 发表于 2008-6-17 12:16:50

原帖由 尽在不言中 于 2008-6-17 00:54 发表
无法识别的~~~!! 都已上传卡巴~!!

卡巴回了沒有??

显示全部楼层 · 发表于 2008-6-17 18:59:17

Filename Result
cid_store.dat    CLEAN

The file 'cid_store.dat' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result
FNTCACHE.DAT    DAMAGED FILE (UNKNOWN)

The file 'FNTCACHE.DAT' has been determined to be 'DAMAGED FILE (UNKNOWN)'. In particular this means that this file is damaged and not working properly. We could not find any malicious content. However the heuristic detection module may still detect this particular file even though it is damaged. In that case we will not adjust and remove detection for this damaged file.
Filename Result
wpa.dbl    KNOWN CLEAN

The file 'wpa.dbl' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows 2003 Server (SP0)'.

显示全部楼层 · 发表于 2008-6-17 19:21:57

RS0.....

显示全部楼层 · 发表于 2008-6-17 20:12:12

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.hom
病毒： Trojan.Win32.Undef.hom
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.Win32.VUNDO.bhi
病毒： AdWare.Win32.Vundo.f
病毒： Trojan.PSW.Win32.GameOL.nyf
病毒： Trojan.Win32.Undef.hhf

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.49.12

显示全部楼层 · 发表于 2008-6-17 23:01:15

Hello,

##############################.exe2 - Trojan.Win32.Delf.cvs

This file is already detected. Please update your antivirus bases.

cid_store.dat, FNTCACHE.DAT, wpa.dbl

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-6-18 00:46:02

sav10

[病毒样本] 13

本帖子中包含更多资源

回复 1楼 kato9096 的帖子

回复 1楼 kato9096 的帖子

20/9

本帖子中包含更多资源