3 downloader+1 zhelatin

显示全部楼层 · 发表于 2008-7-16 17:25:23

EAV
C:\Documents and Settings\Administrator\桌面\pkg8.rar > RAR > mas1.exe - 可能是 Win32/Genetik 特洛伊木马的变种

显示全部楼层 · 发表于 2008-7-16 17:28:24

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... e7&t=1216200489
Information: Contains detection pattern of the worm WORM/Zhelatin.zh

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.68, VDF 7.0.5.124

显示全部楼层 · 发表于 2008-7-16 17:28:40

显示全部楼层 · 发表于 2008-7-16 17:29:16

Virus 2008-07-16  17:28:38 C:\test\pkg8.rar\update.exe Win32.Troj.OnlineGames.aw.110592 Skipped, no action
Virus 2008-07-16  17:28:38 C:\test\pkg8.rar\mas1.exe Win32.Troj.Down.a.155648 Skipped, no action
Virus 2008-07-16  17:28:38 C:\test\pkg8.rar\kkk.exe Win32.Troj.Agent.ks.204800 Skipped, no action

显示全部楼层 · 发表于 2008-7-16 17:36:54

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\pkg8.rar'
C:\Documents and Settings\Administrator\桌面\pkg8.rar
  [0] Archive type: RAR
  --> form.exe
   [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.zh
  --> kkk.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> mas1.exe
   [DETECTION] Is the Trojan horse TR/Crypt.DJ.28
  --> update.exe
   [DETECTION] Is the Trojan horse TR/Agent.29696.13
   [NOTE]    The file was deleted!

End of the scan: 星期三 2008年7月16日  17:36
Used time: 00:08 min

The scan has been done completely.

   0 Scanning directories
   5 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings

显示全部楼层 · 发表于 2008-7-16 17:37:53

显示全部楼层 · 发表于 2008-7-16 18:48:53

avast 杀3 剩form.exe(zhelatin)

[ 本帖最后由 barbara 于 2008-7-16 18:50 编辑 ]

显示全部楼层 · 发表于 2008-7-16 18:54:36

病毒 2008-07-16  18:54:07 C:\Documents and Settings\Administrator\桌面\pkg8.rar\update.exe Win32.Troj.OnlineGames.aw.110592 跳过，未处理
病毒 2008-07-16  18:54:07 C:\Documents and Settings\Administrator\桌面\pkg8.rar\mas1.exe Win32.Troj.Down.a.155648 跳过，未处理
病毒 2008-07-16  18:54:07 C:\Documents and Settings\Administrator\桌面\pkg8.rar\kkk.exe Win32.Troj.Agent.ks.204800 跳过，未处理

显示全部楼层 · 发表于 2008-7-16 19:48:15

McAfee报了2个。。

[病毒样本] 3 downloader+1 zhelatin

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源