Virus*5

显示全部楼层 · 发表于 2008-6-18 13:38:45

老妈单位里的...
卡巴7认识三个

显示全部楼层 · 发表于 2008-6-18 13:44:57

费尔两个...

显示全部楼层 · 发表于 2008-6-18 13:50:28

Virusa\hpbnijr.bat - probably a variant of BAT/KillAV 木马
Virusa\SVCH0ST.EXE - a variant of Win32/Agent.AMB 木马

显示全部楼层 · 发表于 2008-6-18 14:19:47

无法识别的...已上传卡巴分析..~!

显示全部楼层 · 发表于 2008-6-18 14:46:45

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Virusa'
C:\Documents and Settings\Administrator\桌面\Virusa\SVCH0ST.EXE
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.amb.40 Backdoor server programs
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Virusa\winsky.dll
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Backdoor.Gen Backdoor server programs
   [NOTE]    The file was deleted!
File ID  Filename Size (Byte) Result
25050450  hpbnijr.bat  40 Byte  UNDER ANALYSIS
25050451  hpbnijr.inf  169 Byte  UNDER ANALYSIS
25050452  SystemServiceD.sys  5.75 KB  UNDER ANALYSIS

显示全部楼层 · 发表于 2008-6-18 20:25:26

[Found backdoor] <W32/Hupigon.G.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virusa\SVCH0ST.EXE
[Found security risk] <W32/SYStroj.N.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virusa\SystemServiceD.sys
[Found backdoor] <W32/Hupigon.F.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virusa\winsky.dll

---------------------------------------------------------------------
Scan ended: 2008-6-18, 20:25:07
Duration: 0:00:00

Scan result:

Scanned files:    10
Infected objects:    3
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-18 20:25:57

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\Virusa\SVCH0ST.EXE <- Trojan.Agent.Egr : No action
C:\Documents and Settings\All Users\Documents\Test\Virusa\winsky.dll <- Heur.RoundKick : No action

Scanned objects : 5

Infected objects : 2

显示全部楼层 · 发表于 2008-6-18 20:26:47

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Agent.zek

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.49.22

[病毒样本] Virus*5

本帖子中包含更多资源

回复 1楼 gankeyu 的帖子

F-Prot 4.4.4

ArcaVir2008

6/1