[病毒样本] 7x

显示全部楼层 · 发表于 2008-7-12 15:10:50

明明7个文件

显示全部楼层 · 发表于 2008-7-12 15:14:04

2008-7-12 15:14:04 Real-time file system protection file E:\virus\bpk 3\92F2FDCA a variant of Win32/Adware.WSearch application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-12 15:13:58 Real-time file system protection file E:\virus\bpk 3\95C3D4AA Win32/TrojanDropper.Delf.NHO trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-12 15:13:43 Real-time file system protection file E:\virus\bpk 3\F076B410 probably a variant of Win32/Rbot trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-7-12 15:28:04

汗传错包了改掉

显示全部楼层 · 发表于 2008-7-12 15:48:16

信息 2008-07-12  15:47:22 您此次查毒清除了4个病毒
信息 2008-07-12  15:47:22 您此次查毒共查出5个病毒以及危险代码
信息 2008-07-12  15:47:22 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件12个
信息 2008-07-12  15:47:22 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2008-07-12  15:47:22 D:\Desktop\bpk 3.rar\92F2FDCA Win32.Adware.WSearch.49152 跳过，未处理
病毒 2008-07-12  15:47:19 D:\Desktop\bpk 3.rar\469D23BD Win32.Hack.Rootkit.ai.75696 清除成功
病毒 2008-07-12  15:47:19 D:\Desktop\bpk 3.rar\8CDC000D Win32.Troj.SpyDelf.ak.561152 清除成功
病毒 2008-07-12  15:47:19 D:\Desktop\bpk 3.rar\F076B410 Win32.Hack.Rbot.121856 清除成功
病毒 2008-07-12  15:47:19 D:\Desktop\bpk 3.rar\9CBC6B0 Win32.Troj.Vaklik.133892 清除成功

显示全部楼层 · 发表于 2008-7-12 15:49:08

已刪除: 特洛伊木馬程式 Trojan.Win32.Vaklik.bha 檔案: C:\Documents and Settings\kato9096\桌面\bpk 3.rar/9CBC6B0
已刪除: 特洛伊木馬程式 Backdoor.Win32.Rbot.gen 檔案: C:\Documents and Settings\kato9096\桌面\bpk 3.rar/F076B410
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.bjx 檔案: C:\Documents and Settings\kato9096\桌面\bpk 3.rar/8CDC000D//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Rootkit.Win32.KernelBot.ai 檔案: C:\Documents and Settings\kato9096\桌面\bpk 3.rar/469D23BD
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.scef 檔案: C:\Documents and Settings\kato9096\桌面\bpk 3.rar/95C3D4AA
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.vsn 檔案: C:\Documents and Settings\kato9096\桌面\bpk 3.rar/92F2FDCA

6,卡巴不报1个,已上报,估計10年后回.

显示全部楼层 · 发表于 2008-7-12 15:59:22

http://www.threatexpert.com/repo ... d7402f6785bde5d4fe6
这包的downloader(92F2FDCA)

显示全部楼层 · 发表于 2008-7-12 17:12:22

Hello.
New malicious software was found in the attached file.
not-a-virus:AdWare.Win32.SuperJuan.bpx
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-7-12 17:17:44

sophos 7个全了（包含2个启发）

显示全部楼层 · 发表于 2008-7-12 17:18:27

Start of the scan: 2008年7月12日星期六  00:28

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\bpk 3.rar'
C:\Documents and Settings\Administrator\桌面\bpk 3.rar
  [0] Archive type: RAR
  --> E53630EC
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 9CBC6B0
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> F076B410
   [DETECTION] Contains detection pattern of the worm WORM/Rbot.210944
  --> 8CDC000D
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> 469D23BD
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 95C3D4AA
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 92F2FDCA
   [DETECTION] Is the Trojan horse TR/Agent.49152
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-15 18:53:33

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... b3&t=1216119186
Information: Is the Trojan horse TR/Vundo.FAN

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.64, VDF 7.0.5.116

[病毒样本] 7x

本帖子中包含更多资源

浏览过的版块