生成物x13

显示全部楼层 · 发表于 2008-7-26 15:20:01

卡巴 4
检测到：木马程序 Trojan-Proxy.Win32.Small.tt 文件: C:\Sandbox\Administrator\DefaultBox\drive\C\WINDOWS\services.exe
检测到：木马程序 Rootkit.Win32.Agent.bqx 文件: C:\Sandbox\Administrator\DefaultBox\drive\C\WINDOWS\VZC22B.txt
检测到：木马程序 Trojan-Downloader.Win32.Agent.wvn 文件: C:\Sandbox\Administrator\DefaultBox\drive\C\WINDOWS\WAELIIM.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.yvg 文件: C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\RichVideoCodec\escan.exe

显示全部楼层 · 发表于 2008-7-26 15:22:11

信息 2008-07-26  15:21:31 您此次查毒隔离了3个文件
信息 2008-07-26  15:21:31 您此次查毒清除了1个病毒
信息 2008-07-26  15:21:31 您此次查毒共查出4个病毒以及危险代码
信息 2008-07-26  15:21:31 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件15个
信息 2008-07-26  15:21:31 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2008-07-26  15:21:31 D:\Desktop\C\WINDOWS\system32\scui.cpl Win32.RiskWare.XPAntivirus.ld.225280 隔离成功
病毒 2008-07-26  15:21:26 D:\Desktop\C\WINDOWS\YNUH5PWNXOGQ.exe Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-07-26  15:21:26 D:\Desktop\C\WINDOWS\WAELIIM.exe Win32.Troj.AgentT.bv.28672 隔离成功
病毒 2008-07-26  15:21:26 D:\Desktop\C\WINDOWS\system32\FXWN3CCGG.exe Win32.Troj.GuiseIeT.xl.61440 隔离成功

显示全部楼层 · 发表于 2008-7-26 15:36:15

费尔5个

显示全部楼层 · 发表于 2008-7-26 16:01:17

Begin scan in 'C:\Documents and Settings\Administrator\桌面\C'
C:\Documents and Settings\Administrator\桌面\C\Program Files\RichVideoCodec\escan.exe
[DETECTION] Is the TR/Agent.sgb Trojan
[NOTE]    A backup was created as '48edda31.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\C\Program Files\RichVideoCodec\InstallRegerLib.dll
[DETECTION] Is the TR/Dldr.Zlob.pap Trojan
[NOTE]    A backup was created as '48fdda2c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\C\WINDOWS\services.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '48fcda23.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\C\WINDOWS\WAELIIM.exe
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '48cfd9ff.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\C\WINDOWS\YNUH5PWNXOGQ.exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Astal.1 back-door program
[NOTE]    A backup was created as '48dfda0c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\C\WINDOWS\system32\FXWN3CCGG.exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Astal.1 back-door program
[NOTE]    A backup was created as '48e1da16.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\C\WINDOWS\system32\RichVideoCodec.dll
[DETECTION] Is the TR/Dldr.Zlob.paq Trojan
[NOTE]    A backup was created as '48edda27.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\C\WINDOWS\system32\scui.cpl
[DETECTION] Is the TR/Renos.ndb.1 Trojan
[NOTE]    A backup was created as '48ffda21.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年7月26日  16:01
Used time: 00:05 Minute(s)

The scan has been done completely.

   7 Scanning directories
   13 Files were scanned
   8 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   8 files were deleted
   0 files were repaired
   8 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   0 Archives were scanned
   0 Warnings
   8 Notes

显示全部楼层 · 发表于 2008-7-26 16:07:50

扫描系统区域...
扫描所选择的目录和文件...
对象: escan.exe
路径: F:\virus\vir\C\Program Files\RichVideoCodec
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Small.yvg (KAV 引擎), Trojan.FakeAlert.VD (BD 引擎)
对象: InstallRegerLib.dll
路径: F:\virus\vir\C\Program Files\RichVideoCodec
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.xkz (KAV 引擎)
对象: services.exe
路径: F:\virus\vir\C\WINDOWS
Status: 已发现病毒
病毒: Trojan-Proxy.Win32.Small.tt (KAV 引擎), Trojan.Kobcka.EQ (BD 引擎)
对象: FXWN3CCGG.exe
路径: F:\virus\vir\C\WINDOWS\system32
Status: 已发现病毒
病毒: Trojan.Win32.AntiAV.bs (KAV 引擎)
对象: RichVideoCodec.dll
路径: F:\virus\vir\C\WINDOWS\system32
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.xkz (KAV 引擎)
对象: scui.cpl
路径: F:\virus\vir\C\WINDOWS\system32
Status: 已发现病毒
病毒: not-a-virus:FraudTool.Win32.XPAntivirus.ld (KAV 引擎), Trojan.Renos.NDB (BD 引擎)
对象: VZC22B.txt
路径: F:\virus\vir\C\WINDOWS
Status: 已发现病毒
病毒: Rootkit.Win32.Agent.bqx (KAV 引擎)
对象: WAELIIM.exe
路径: F:\virus\vir\C\WINDOWS
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.wvn (KAV 引擎), Trojan.Downloader.Agent.ZMF (BD 引擎)
对象: YNUH5PWNXOGQ.exe
路径: F:\virus\vir\C\WINDOWS
Status: 已发现病毒
病毒: Trojan.Win32.AntiAV.bs (KAV 引擎)

显示全部楼层 · 发表于 2008-7-26 16:38:22

在 C:\Documents and Settings\Administrator\桌面\C\WINDOWS\VZC22B.txt 中发现 Rootkit.Podnuha.aa 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\C\WINDOWS\YNUH5PWNXOGQ.exe 中发现 TrojanDropper.Agent.ohx 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\C\WINDOWS\system32\FXWN3CCGG.exe 中发现 TrojanDropper.Agent.ohx 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\C\Program Files\RichVideoCodec\escan.exe 中发现 TrojanDownloader.Small.aeoy 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\C\WINDOWS\WAELIIM.exe 中发现 TrojanDownloader.Agent.akcb 病毒, 已删除

显示全部楼层 · 发表于 2008-7-26 17:13:54

BitDefender 9.0 standard 4只

显示全部楼层 · 发表于 2008-7-26 17:14:00

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.yvg 檔案: C:\Documents and Settings\kato9096\桌面\C\Program Files\RichVideoCodec\escan.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.xkz 檔案: C:\Documents and Settings\kato9096\桌面\C\Program Files\RichVideoCodec\InstallRegerLib.dll
已刪除: 特洛伊木馬程式 Trojan-Proxy.Win32.Small.tt 檔案: C:\Documents and Settings\kato9096\桌面\C\WINDOWS\services.exe
已刪除: 特洛伊木馬程式 Rootkit.Win32.Agent.bqx 檔案: C:\Documents and Settings\kato9096\桌面\C\WINDOWS\VZC22B.txt
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.wvn 檔案: C:\Documents and Settings\kato9096\桌面\C\WINDOWS\WAELIIM.exe
已刪除: 特洛伊木馬程式 Trojan.Win32.AntiAV.bs 檔案: C:\Documents and Settings\kato9096\桌面\C\WINDOWS\YNUH5PWNXOGQ.exe
已刪除: 特洛伊木馬程式 Trojan.Win32.AntiAV.bs 檔案: C:\Documents and Settings\kato9096\桌面\C\WINDOWS\system32\FXWN3CCGG.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.xkz 檔案: C:\Documents and Settings\kato9096\桌面\C\WINDOWS\system32\RichVideoCodec.dll
已刪除: Riskware not-a-virus:FraudTool.Win32.XPAntivirus.ld 檔案: C:\Documents and Settings\kato9096\桌面\C\WINDOWS\system32\scui.cpl//PE_Patch.UPX//UPX

9个,不报的已上报.

显示全部楼层 · 发表于 2008-7-26 21:21:10

McAfee 报了3个。。。

[病毒样本] 生成物x13

本帖子中包含更多资源

kv