番茄每日精选 20080623

显示全部楼层 · 发表于 2008-6-23 12:29:08

卡巴7杀9个

显示全部楼层 · 发表于 2008-6-23 12:33:28

norman 7.0,杀了10个

显示全部楼层 · 发表于 2008-6-23 13:03:45

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Mnless.zgw
病毒： Trojan.DL.Win32.VB.yuj
病毒： Suspicious.Trojan.Win32.Downldr.a
病毒： Dropper.Win32.Agent.gaw
病毒： Trojan.DL.Win32.Mnless.zan
病毒： Packer.Win32.Agent.g
病毒： Trojan.DL.Win32.Mnless.xp
病毒： Trojan.Win32.Edog.af

MAC 地址：00:0E:1F:51:5B:16

用户来源：局域网

软件版本：20.50

无法识别的.已上传瑞星分析...~~!

显示全部楼层 · 发表于 2008-6-23 14:32:01

赛门铁克SEP报了8个

显示全部楼层 · 发表于 2008-6-23 21:35:58

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.zgw
病毒： Trojan.DL.Win32.VB.yuj
病毒： Suspicious.Trojan.Win32.Downldr.a
病毒： Dropper.Win32.Agent.gaw
病毒： Trojan.DL.Win32.Mnless.zan
病毒： Packer.Win32.Agent.g
病毒： Trojan.DL.Win32.Mnless.xp
病毒： Trojan.Win32.Edog.af

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.50.02

显示全部楼层 · 发表于 2008-6-23 21:38:53

[Found security risk] <W32/Agent.G.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_504.exe
[Found possible security risk] <W32/Heuristic-CSU!Eldorado (dropper, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_512.exe->(embedded)->(embedded)
[Found backdoor] <W32/Polycrypt.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_522.exe->(SimplePack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_528.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_544.EXE->(UPack)
[Found downloader] <W32/Downloader.I.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_545.exe->(CAB)->1.exe->(SimplePack)->(RCryptor)
[Found downloader] <W32/Downldr2.CESN (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_563.exe
[Found backdoor] <W32/Rbot.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_566.exe
[Found possible security risk] <W32/Heuristic-210!Eldorado (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\20080623.rar->20080623\XX_567.exe->(Malware_Prot.Q)

---------------------------------------------------------------------
Scan ended: 2008-6-23, 21:38:30
Duration: 0:00:07

Scan result:

Scanned files:    6
Infected objects:    9
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-23 21:40:55

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\20080623\20080623\XX_504.exe <- Trojan.Poison.K : Delete
C:\Documents and Settings\All Users\Documents\Test\20080623\20080623\XX_512.exe<UPack>:XX_512.exe <- Trojan.Psw.Onlinegames.Aaoe : Delete
C:\Documents and Settings\All Users\Documents\Test\20080623\20080623\XX_519.exe<UPX>:XX_519.exe <- Downloader.Vb.Ecg : Delete
C:\Documents and Settings\All Users\Documents\Test\20080623\20080623\XX_544.EXE<UPack>:XX_544.EXE <- Heur.RoundKick : Delete
C:\Documents and Settings\All Users\Documents\Test\20080623\20080623\XX_545.exe <- Heur.W32 : Delete
C:\Documents and Settings\All Users\Documents\Test\20080623\20080623\XX_566.exe<UPack>:XX_566.exe <- Variant:Trojan.Agent.Fb : Delete

Scanned objects : 15

Infected objects : 6

显示全部楼层 · 发表于 2008-6-23 21:44:08

7

图略

显示全部楼层 · 发表于 2008-6-23 21:47:36

Scan Log
Version of virus signature database: 3192 (20080616)
Date: 2008-6-23 Time: 21:47:27
Scanned disks, folders and files: G:\v\20080623.rar
G:\v\20080623.rar » RAR » 20080623\XX_504.exe - a variant of Win32/Poison trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_512.exe - a variant of Win32/TrojanDownloader.Agent.NWE trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_519.exe - probably unknown NewHeur_PE virus [7] - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_522.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_528.exe - probably a variant of Win32/TrojanClicker.Agent.NCS trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_544.EXE - probably a variant of Win32/TrojanDownloader.Agent.NWE trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_545.exe » CAB » 1.exe - a variant of Win32/Agent.NIT trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_563.exe - probably a variant of Win32/TrojanDownloader.Small.NZK trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_566.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\20080623.rar » RAR » 20080623\XX_567.exe - is OK
Number of scanned objects: 10
Number of threats found: 9
Number of cleaned objects: 9
Time of completion: 21:47:33 Total scanning time: 6 sec (00:00:06)

Notes:
[7] Object is probably infected with an unknown virus.

显示全部楼层 · 发表于 2008-6-23 22:38:54

木马名称：Trojan/Win32.IEprot.jal
路径：E:\20080623\20080623\XX_566.exe
查杀时间：2008-06-23 22:36
木马名称：Trojan/Win32.HZJ.aaa
路径：E:\20080623\20080623\XX_563.exe
查杀时间：2008-06-23 22:36
木马名称：Trojan/Win32.PSW.OnLineGames.xzs
路径：E:\20080623\20080623\XX_544.EXE
查杀时间：2008-06-23 22:36
木马名称：Trojan/Win32.IEprot.jal
路径：E:\20080623\20080623\XX_528.exe
查杀时间：2008-06-23 22:36
木马名称：Trojan/Win32.Rodog.lza
路径：E:\20080623\20080623\XX_512.exe
查杀时间：2008-06-23 22:36

其余5个给卡巴搞定了..

[病毒样本] 番茄每日精选 20080623

本帖子中包含更多资源

本帖子中包含更多资源

回复 1楼 lanvin 的帖子

本帖子中包含更多资源

17/8

F-Prot 4.4.4

ArcaVir2008

Virus Chaser 5.0a

360+安天引擎 5个.