[病毒样本] *9

显示全部楼层 · 发表于 2008-7-4 10:26:19

来点质量不行的....

显示全部楼层 · 发表于 2008-7-4 10:28:53

显示全部楼层 · 发表于 2008-7-4 10:29:44

显示全部楼层 · 发表于 2008-7-4 13:16:54

Begin scan in 'C:\Documents and Settings\Administrator\桌面\9'
C:\Documents and Settings\Administrator\桌面\9\0.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    A backup was created as '48d2b26c.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\9\2.exe
   [DETECTION] Contains detection pattern of the dropper DR/BHO.BOO.12
   [NOTE]    A backup was created as '49541a6d.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\9\3.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    A backup was created as '48d2b26d.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\9\4.exe
   [DETECTION] Contains detection pattern of the dropper DR/Cinmus.iih
   [NOTE]    A backup was created as '49541a6e.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\9\5.exe
   [DETECTION] Contains detection pattern of the dropper DR/Boran.AD
   [NOTE]    A backup was created as '48d2b26f.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\9\7.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.224372
   [NOTE]    A backup was created as '49541a70.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\9\8.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.Dpf.2
   [NOTE]    A backup was created as '48d2b271.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\9\9.exe
   [DETECTION] Contains detection pattern of the dropper DR/Boran.DU.20
   [NOTE]    A backup was created as '49541a72.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年7月4日  13:16
Used time: 00:05 min

The scan has been done completely.

   1 Scanning directories
   9 Files were scanned
   8 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   8 files were deleted
   0 files were repaired
   8 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   0 Archives were scanned
   0 Warnings
   8 Notes

25066000

6.exe

172.63 KB

UNDER ANALYSIS

[ 本帖最后由 Kitman 于 2008-7-4 13:35 编辑 ]

显示全部楼层 · 发表于 2008-7-4 14:14:15

病毒 2008-07-04 14:15:08 C:\Documents and Settings\Administrator\桌面\9.zip\5.exe Win32.Troj.Agent.lu.106270 清除成功
病毒 2008-07-04 14:15:07 C:\Documents and Settings\Administrator\桌面\9.zip\0.exe Win32.TrojDownloader.Agent.24576 清除成功
信息 2008-07-04 14:14:56 金山毒霸主程序启动查毒过程，查毒方式：命令行查毒

显示全部楼层 · 发表于 2008-7-4 14:48:43

all killed

显示全部楼层 · 发表于 2008-7-4 14:54:42

信息 2003-07-04  14:54:28 您此次查毒共查出2个病毒以及危险代码
信息 2003-07-04  14:54:28 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件11个
信息 2003-07-04  14:54:28 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2003-07-04  14:54:28 D:\Virus\9(2).zip\5.exe Win32.Troj.Agent.lu.106270 跳过，未处理
病毒 2003-07-04  14:54:28 D:\Virus\9(2).zip\0.exe Win32.TrojDownloader.Agent.24576 跳过，未处理

显示全部楼层 · 发表于 2008-7-4 15:10:15

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.pey 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/0.exe
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.boo 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/2.exe//data0002
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Cinmus.khw 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/4.exe//stream//data0002//data0003
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.acv 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/5.exe//stream//data0001
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.sao 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/7.exe//data0003//NSPack
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Agent.dpf 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/8.exe//data0002
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Boran.du 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/9.exe//stream//data0001

7,不报的已上报到卡巴

显示全部楼层 · 发表于 2008-7-4 15:13:18

费尔全杀

显示全部楼层 · 发表于 2008-7-4 15:49:57

金山 2

[病毒样本] *9

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块