２２

显示全部楼层 · 发表于 2008-6-16 23:49:05

已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.bgf 檔案: C:\Documents and Settings\kato9096\桌面\22\1.ext//data0002
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.bfj 檔案: C:\Documents and Settings\kato9096\桌面\22\10.ext//PE_Patch//UPack
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Cinmus.hpy 檔案: C:\Documents and Settings\kato9096\桌面\22\2.ext//stream//data0002//data0003
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Cinmus.fgc 檔案: C:\Documents and Settings\kato9096\桌面\22\2.ext//stream//data0002//data0004
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Boran.du 檔案: C:\Documents and Settings\kato9096\桌面\22\4.ext//stream//data0001
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.ExeBinder.k 檔案: C:\Documents and Settings\kato9096\桌面\22\6.ext//data0007
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Adload.zy 檔案: C:\Documents and Settings\kato9096\桌面\22\6.ext//data0010
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Cinmus.kde 檔案: C:\Documents and Settings\kato9096\桌面\22\7.ext//data0004
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.dwl 檔案: C:\Documents and Settings\kato9096\桌面\22\79ca1.exe2
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.bmr 檔案: C:\Documents and Settings\kato9096\桌面\22\891.dll
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.bms 檔案: C:\Documents and Settings\kato9096\桌面\22\9791.dll

１１,不报已上报

[ 本帖最后由 kato9096 于 2008-6-16 23:51 编辑 ]

显示全部楼层 · 发表于 2008-6-17 00:51:45

无法识别的~~~!都已上传卡巴~!!>..

显示全部楼层 · 发表于 2008-6-17 00:54:55

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新資料夾'
C:\Documents and Settings\Administrator\桌面\新資料夾\1.ext
   [DETECTION] Contains detection pattern of the dropper DR/BHO.bgf.43
   [NOTE]    A backup was created as '48bb9b02.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\10.ext
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [NOTE]    A backup was created as '48849b04.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\2.ext
   [DETECTION] Contains detection pattern of the dropper DR/Cinmus.cdj
   [NOTE]    A backup was created as '493c0243.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\3.ext
   [DETECTION] Is the Trojan horse TR/Dldr.QQHel.NEZ.1
   [NOTE]    A backup was created as '48bb9b04.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\4.ext
   [DETECTION] Contains detection pattern of the dropper DR/Boran.DU.20
   [NOTE]    A backup was created as '493c0245.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\6.ext
   [DETECTION] Contains detection pattern of the dropper DR/Drop.Exebinder.K.4
   [NOTE]    A backup was created as '48bb9b06.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\7.ext
   [DETECTION] Is the Trojan horse TR/Drop.Lop.174434
   [NOTE]    A backup was created as '493c0247.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\79ca1.exe2
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.aeq
   [NOTE]    A backup was created as '48b99b0d.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\891.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BDSearch.1.45
   [NOTE]    A backup was created as '48879b0d.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\新資料夾\9791.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.bms
   [NOTE]    A backup was created as '488f9b0b.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年6月17日  00:54
Used time: 00:03 min

The scan has been done completely.

   1 Scanning directories
   22 Files were scanned
   10 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   10 files were deleted
   0 files were repaired
   10 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   12 Files not concerned
   0 Archives were scanned
   0 Warnings
   10 Notes

显示全部楼层 · 发表于 2008-6-17 00:56:21

25048843    -6125-9-79    10 Byte    UNDER ANALYSIS
25048844    04cd    68 Byte    UNDER ANALYSIS
25048845    053    68 Byte    UNDER ANALYSIS
25048846    10125-9-79    29 Byte    UNDER ANALYSIS
204679    13.ext    1.28 KB    CLEAN
25048847    210    68 Byte    UNDER ANALYSIS
115041    12520437.cpx    2.1 KB    KNOWN CLEAN
115042    12520850.cpx    2.18 KB    KNOWN CLEAN
250291    6to4svc.dll    98 KB    KNOWN CLEAN
267190    aaaamon.dll    25 KB    KNOWN CLEAN

显示全部楼层 · 发表于 2008-6-17 01:14:44

dr.web found 13

显示全部楼层 · 发表于 2008-6-17 12:17:06

原帖由 尽在不言中 于 2008-6-17 00:51 发表
无法识别的~~~!都已上传卡巴~!!>..

卡巴回了沒有???

显示全部楼层 · 发表于 2008-6-17 14:16:29

傘回了~
25048843       -6125-9-79       10 Byte       CLEAN
25048844       04cd       68 Byte       CLEAN
25048845       053       68 Byte       CLEAN
25048846       10125-9-79       29 Byte       CLEAN
204679       13.ext       1.28 KB       CLEAN
25048847       210       68 Byte       CLEAN
115041       12520437.cpx       2.1 KB       KNOWN CLEAN
115042       12520850.cpx       2.18 KB       KNOWN CLEAN
250291       6to4svc.dll       98 KB       KNOWN CLEAN
267190       aaaamon.dll       25 KB       KNOWN CLEAN

显示全部楼层 · 发表于 2008-6-17 20:48:31

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： AdWare.Win32.Mnless.age
病毒： Trojan.Clicker.Win32.PopHot.dyi
病毒： Trojan.Clicker.Win32.PopHot.dyi

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.49.12

显示全部楼层 · 发表于 2008-6-17 21:01:22

D:\download\22.part1.rar>>79ca1.exe2 Backdoor.CKB.iadt 后门还未处理
D:\download\22.part1.rar>>891.dll Adware.BHO.bmr.hggu.dll 广告程序还未处理
D:\download\22.part1.rar>>9791.dll Adware.BHO.bms.cyri.dll 广告程序还未处理
D:\download\22.part1.rar>>1.ext Adware.BHO.bgf.eprn.arc 广告程序还未处理
D:\download\22.part1.rar>>2.ext Adware.Cinmus.fgc.seez.arc 广告程序还未处理
D:\download\22.part1.rar>>3.ext Trojan.Cap861112.khwj.arc 木马还未处理
D:\download\22.part1.rar>>4.ext Adware.Boran.du.char.arc 广告程序还未处理
D:\download\22.part1.rar>>6.ext TrojanDownloader.Adload.zy.tftg.arc 木马还未处理
D:\download\22.part1.rar>>7.ext TrojanDropper.Lop.174434.dhgp.arc 木马还未处理
D:\download\22.part1.rar>>10.ext Trojan.Cap86913.ojfc 木马还未处理

10

显示全部楼层 · 发表于 2008-6-17 22:57:32

Hello,

#6125#9#79, 04cd, 053, 10125#9#79, 11.ext, 12.ext, 12520437.cpx, 12520850.cpx, 13.ext, 210, 6to4svc.dll, aaaamon.dll

No malicious code were found in these files.

3.ext - not-a-virus:AdWare.Win32.BHO.boo

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] ２２

本帖子中包含更多资源

回复 1楼 kato9096 的帖子

56/8

浏览过的版块