13个flash 2个exe

显示全部楼层 · 发表于 2008-7-1 20:05:16

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.omb
病毒： Trojan.PSW.Win32.Lineage.gcn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.51.12

显示全部楼层 · 发表于 2008-7-1 20:05:24

用G DATA AntiVirus检测病毒
版本 18.5.8071.731
病毒特征库日期 2008/7/1
开始时间： 2008/7/1 20:01
引擎：引擎A (AVK 18.4340), 引擎B (AVKB 18.330)
启发式：开启
档案文件：开启
系统区域：开启

检测系统区域...
检测以下目录和文件：
  C:\Documents and Settings\祝俊杰\桌面\新建文件夹\

对象： 4561.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： Exploit.SWF.Downloader.cl (引擎A)
对象： 4562.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： Exploit.SWF.Downloader.cv (引擎A)
对象： ad.exe
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： Trojan-Downloader.Win32.Agent.uvz (引擎A)
对象： bak.exe
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： Trojan-GameThief.Win32.WOW.bfq (引擎A)
对象： f115.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： f16.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： f28.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： f45.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： f47.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： i115.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： i16.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： i28.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： i45.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： i47.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)
对象： i64.swf
      路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
      状态：移动文件到隔离区
      病毒： SWF:CVE-2007-0071 [Expl] (引擎B)

检测执行时间： 2008/7/1 20:02
15个文件已检测
15个受感染文件
全歼

[ 本帖最后由 ch00962610 于 2008-7-1 20:11 编辑 ]

显示全部楼层 · 发表于 2008-7-1 20:12:40

显示全部楼层 · 发表于 2008-7-1 20:13:23

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Hack.Exploit.Swf.a

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.51.12

显示全部楼层 · 发表于 2008-7-1 20:14:39

扫描系统区域...
扫描所选择的目录和文件...
对象: 4561.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Downloader.cl (KAV 引擎)
对象: 4562.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Downloader.cv (KAV 引擎)
对象: ad.exe
路径: D:\13个SWF
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.uvz (KAV 引擎), Trojan.Crypt.DJ (BD 引擎)
对象: bak.exe
路径: D:\13个SWF
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.WOW.bfq (KAV 引擎), Dropped:Trojan.Generic.320206 (BD 引擎)
对象: f16.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: f28.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: f45.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: f47.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: f115.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: i16.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: i28.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: i45.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: i47.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: i64.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
对象: i115.swf
路径: D:\13个SWF
Status: 已发现病毒
病毒: Exploit.SWF.Gen (BD 引擎)
扫描完成: 2008-7-1 20:14
已检查 15 个文件
已发现 15 个染毒文件
全灭

显示全部楼层 · 发表于 2008-7-1 20:17:11

C:\Documents and Settings\Administrator\桌面\2个exe.rar>>ad.exe TrojanDownloader.Agent.utu.nfor 木马还未处理
C:\Documents and Settings\Administrator\桌面\2个exe.rar>>bak.exe TrojanPSW.WOW.bfq.zzwi 木马还未处理
C:\Documents and Settings\Administrator\桌面\13个SWF.rar>>4561.swf Exploit.SWF.Downloader.ci.gen 木马还未处理
C:\Documents and Settings\Administrator\桌面\13个SWF.rar>>4562.swf Exploit.SWF.Downloader.ci.gen 木马还未处理

显示全部楼层 · 发表于 2008-7-1 20:18:40

病毒 2008-07-01 20:18:26 C:\Documents and Settings\Administrator\桌面\2个exe.rar\bak.exe Win32.PSWTroj.Lineage.106496 清除成功
病毒 2008-07-01 20:18:26 C:\Documents and Settings\Administrator\桌面\2个exe.rar\ad.exe Win32.TrojDownloader.Agent.143360 清除成功

显示全部楼层 · 发表于 2008-7-1 23:29:41

Begin scan in 'C:\Documents and Settings\Administrator\桌面\2__exe'
C:\Documents and Settings\Administrator\桌面\2__exe\ad.exe
--> Object
   [1] Archive type: OVL
   --> Object
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.uhk.1
   [NOTE]    A backup was created as '48984d79.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\2__exe\bak.exe
   [DETECTION] Is the Trojan horse TR/PSW.Wow.bfq.2
   [NOTE]    A backup was created as '48d54d76.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\12'
C:\Documents and Settings\Administrator\桌面\12\f115.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '489b4d72.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\f16.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '48a04d72.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\f28.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '48a24d73.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\f45.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '489f4d75.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\f47.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '48a14d75.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\i115.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '49ecde8b.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\i16.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '49d7de8b.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\i28.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '49d5de8c.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\i45.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '49e8de8e.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\i47.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '49d6de8e.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\12\i64.swf
  [0] Archive type: SWC
  --> Object
   [DETECTION] Contains detection pattern of the exploits EXP/Flash.Gen
   [NOTE]    A backup was created as '489e4d77.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年7月1日  23:29
Used time: 00:03 min

The scan has been done completely.

   1 Scanning directories
   13 Files were scanned
   11 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   11 files were deleted
   0 files were repaired
   11 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   0 Archives were scanned
   0 Warnings
   11 Notes
Sent to Avira

显示全部楼层 · 发表于 2008-7-2 10:11:02

13 个flash ，我的小红伞除了
4561.swf和4562.swf没有报告外，其他的都报

[病毒样本] 13个flash 2个exe

本帖子中包含更多资源

5/2

本帖子中包含更多资源

14/11