查看: 2675|回复: 12
收起左侧

[病毒样本] 。。

[复制链接]
ch00962610
发表于 2008-7-2 14:16:18 | 显示全部楼层 |阅读模式

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
mofunzone
发表于 2008-7-2 14:27:43 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\新建文件夹'
C:\Documents and Settings\morgan\My Documents\新建文件夹\
  dflgh8jkd2q1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
  dflgh8jkd2q2.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [NOTE]      The file was deleted!
  dflgh8jkd2q5.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [NOTE]      The file was deleted!
  dflgh8jkd2q6.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [NOTE]      The file was deleted!
  download1.exe
      [DETECTION] Is the Trojan horse TR/Click.Agen.IP.46
      [NOTE]      The file was deleted!
  download2.exe
      [DETECTION] Is the Trojan horse TR/Agent.30960
      [NOTE]      The file was deleted!
  download3.exe
      [DETECTION] Is the Trojan horse TR/Dialer.QI.108
      [NOTE]      The file was deleted!
  self.dll
  tela1.jpg
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was deleted!
  tela2.jpg
      [DETECTION] Is the Trojan horse TR/Spy.Banker.Gen
      [NOTE]      The file was deleted!
  tela3.jpg
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [NOTE]      The file was deleted!
  tela4.jpg
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  tela5.jpg
      [DETECTION] Is the Trojan horse TR/Spy.Banker.Gen
      [NOTE]      The file was deleted!
  千年.exe


End of the scan: 2008年7月1日  23:27
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     14 Files were scanned
     11 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     12 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
     12 Notes
Palkia
发表于 2008-7-2 14:35:07 | 显示全部楼层

2

风险程序        2008-07-02  14:34:46        C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹\pphcrb2j0e3bp.exe        Win32.Adware.WinFixer.94208        隔离成功       
风险程序        2008-07-02  14:34:45        C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹\download1.exe        Win32.Adware.Agent.90112        隔离成功
啊弥陀佛
发表于 2008-7-2 14:36:36 | 显示全部楼层
木马名称:Trojan-Clicker.Win32.Agent.aus
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹[1]\新建文件夹\DOWNLOAD1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Dialer.ceb
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹[1]\新建文件夹\DOWNLOAD3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
markrhy
发表于 2008-7-2 16:06:42 | 显示全部楼层
红伞杀!!!
sam.to
发表于 2008-7-2 16:11:27 | 显示全部楼层
已刪除: 特洛伊木馬程式 Trojan-Clicker.Win32.Agent.aqk        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾download1.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan.Win32.Small.atd        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾download2.exe//NPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Dialer.qi        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾download3.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-Banker.Win32.Banker.pks        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾tela1.jpg//PKLite32
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Banload.ptx        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾tela2.jpg//PKLite32
已刪除: 特洛伊木馬程式 Trojan-Banker.Win32.Agent.f        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾tela3.jpg//XComp
已刪除: 特洛伊木馬程式 Trojan.Win32.Delf.czl        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾tela4.jpg//UPack
已刪除: 病毒 Worm.Win32.Rokut.ak        檔案: C:\Documents and Settings\kato9096\獢\?啣遣?辣憭鈾?啣遣?辣憭鈾tela5.jpg//XComp


8.有6个不报,已上报.
IllusionWing
发表于 2008-7-2 16:14:53 | 显示全部楼层
http://www.goodmm.net
-> http://www.blog299.cn/one/a.htm?id=012
 -> http://user1.zhong210.cn/ilink.html
  -> http://user1.zhong210.cn/i64.swf
  -> http://user1.zhong210.cn/i47.swf
  -> http://user1.zhong210.cn/i45.swf
  -> http://user1.zhong210.cn/i28.swf
  -> http://user1.zhong210.cn/i16.swf
 -> http://user1.zhong210.cn/fx.htm
  -> http://user1.zhong210.cn/f64.swf
  -> http://user1.zhong210.cn/f47.swf
  -> http://user1.zhong210.cn/f45.swf
  -> http://user1.zhong210.cn/f28.swf
  -> http://user1.zhong210.cn/f16.swf
qigang
发表于 2008-7-3 00:10:46 | 显示全部楼层
巨大体积,一般没兴趣。
sam.to
发表于 2008-7-3 21:36:49 | 显示全部楼层

回复 7楼 gankeyu 的帖子

好像打开不到
cs_virus
发表于 2008-7-3 21:43:15 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-12-22 23:18 , Processed in 0.105930 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表