[病毒样本] X5

显示全部楼层 · 发表于 2008-7-7 23:20:11

5.zip
[0] Archive type: ZIP
--> 931928.dll
      [DETECTION] Is the Trojan horse TR/BHO.Gen
--> iSecurity.cpl
      [DETECTION] Is the Trojan horse TR/Emgr.AL.14
--> setup.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
--> sprof.exe
      [DETECTION] Is the Trojan horse TR/Mitglieder.6148
   --> tmp34725781.dll
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/Emgr.AQ.6
            [WARNING] Infected files in archives cannot be repaired!
      --> Object
            [DETECTION] Is the Trojan horse TR/Emgr.AL.14
            [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-8 15:55:01

风险程序 2008-07-08  15:54:44 C:\Documents and Settings\Administrator\桌面\5.zip\setup.exe Win32.Adware.E404.bv.32768 跳过，未处理
风险程序 2008-07-08  15:54:44 C:\Documents and Settings\Administrator\桌面\5.zip\931928.dll Win32.Adware.E404.dt.53248 跳过，未处理
病毒 2008-07-08  15:54:42 C:\Documents and Settings\Administrator\桌面\5.zip\iSecurity.cpl Win32.Troj.Emgr.al.28672 清除成功

显示全部楼层 · 发表于 2008-7-8 15:56:09

标记帖子...

信息 2008-07-08  15:55:37 您此次查毒清除了1个病毒
信息 2008-07-08  15:55:37 您此次查毒共查出3个病毒以及危险代码
信息 2008-07-08  15:55:37 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件11个
信息 2008-07-08  15:55:37 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2008-07-08  15:55:37 D:\Desktop\5.zip\setup.exe Win32.Adware.E404.bv.32768 跳过，未处理
风险程序 2008-07-08  15:55:37 D:\Desktop\5.zip\931928.dll Win32.Adware.E404.dt.53248 跳过，未处理
病毒 2008-07-08  15:55:35 D:\Desktop\5.zip\iSecurity.cpl Win32.Troj.Emgr.al.28672 清除成功

显示全部楼层 · 发表于 2008-7-8 16:25:20

红伞杀！！！

显示全部楼层 · 发表于 2008-7-8 20:30:27

[Scanning : C:\Download Files]

C:\Download Files\5.zip<ZIP>:iSecurity.cpl <- Trojan.Emgr.Al : No action
C:\Download Files\5.zip<ZIP>:iSecurity.cpl<PECompact2>:iSecurity.cpl <- Trojan.Emgr.Al : No action
C:\Download Files\5.zip<ZIP>:setup.exe <- Adware.E404.Ea : No action
C:\Download Files\5.zip<ZIP>:setup.exe<PECompact2>:setup.exe <- Adware.E404.Ea : No action
C:\Download Files\5.zip<ZIP>:tmp34725781.dll<PECompact2>:tmp34725781.dll<DLLRES>:res0.exe <- Trojan.Emgr.Aq : No action
C:\Download Files\5.zip<ZIP>:tmp34725781.dll<PECompact2>:tmp34725781.dll<DLLRES>:res1.exe <- Trojan.Emgr.Al : No action
C:\Download Files\5.zip<ZIP>:tmp34725781.dll<PECompact2>:tmp34725781.dll<DLLRES>:res1.exe<PECompact2>:res1.exe <- Trojan.Emgr.Al : No action

Scanned objects : 15

Infected objects : 7

显示全部楼层 · 发表于 2008-7-8 20:31:11

[Found possible security risk] <W32/Heuristic-257!Eldorado (not disinfectable)> C:\Download Files\5.zip->sprof.exe->(PecBundle)->(PECompact)

---------------------------------------------------------------------
Scan ended: 2008-7-8, 20:30:44
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-7-9 07:29:00

Result: 5 malware found
AdWare.Win32.E404.dt (adware)
D:\Users\ekincheng\Desktop\5.zip\931928.dll
Trojan.Win32.Emgr.al (virus)
D:\Users\ekincheng\Desktop\5.zip\iSecurity.cpl
AdWare.Win32.E404.ea (adware)
D:\Users\ekincheng\Desktop\5.zip\setup.exe
Trojan-Downloader.Win32.FraudLoad.vagm (virus)
D:\Users\ekincheng\Desktop\5.zip\sprof.exe
Trojan-Downloader.Win32.Small.izj (virus)
D:\Users\ekincheng\Desktop\5.zip\tmp34725781.dll

[病毒样本] X5

本帖子中包含更多资源

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4