捆绑1只..

显示全部楼层 · 发表于 2008-7-29 12:27:50

卡巴报1个启发，捆绑在广告软件中..

显示全部楼层 · 发表于 2008-7-29 12:35:58

很棒小秘书。。。

显示全部楼层 · 发表于 2008-7-29 14:55:14

Begin scan in 'C:\Users\TOSHIBA\Downloads\virus'
C:\Users\TOSHIBA\Downloads\virus\setup.exe
[0] Archive type: ZIP SFX (self extracting)
--> HUNT.DLL
   [DETECTION] Contains recognition pattern of the ADSPY/Henbang.C adware or spyware
--> HBAST.EXE
   [DETECTION] Contains recognition pattern of the ADSPY/Hengbang.M.3 adware or spyware
--> HBAST.DLL
   [DETECTION] Contains recognition pattern of the ADSPY/Hengbang.M.2 adware or spyware
--> HAPAST.DLL
   [DETECTION] Contains recognition pattern of the ADSPY/Henbang.B adware or spyware
--> HENBANG.EXE
   [DETECTION] Contains recognition pattern of the ADSPY/Hengbang.M.4 adware or spyware
[NOTE]    A backup was created as '4902bef9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年7月29日  14:54
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanning directories
   75 Files were scanned
   5 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   70 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-7-29 15:33:44

费尔5个

显示全部楼层 · 发表于 2008-7-29 18:09:48

看来红伞要开高启发......

显示全部楼层 · 发表于 2008-7-29 20:17:51

McAfee报了。。。

显示全部楼层 · 发表于 2008-7-29 20:19:08

扫描系统区域...
扫描所选择的目录和文件...
对象: HBAST.EXE
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.m (KAV 引擎)
对象: HBAST.DLL
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.m (KAV 引擎)
对象: HENBANG.EXE
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.m (KAV 引擎)
对象: (ZIP Sfx o) HUNT.DLL
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: Adware.Generic.17815 (BD 引擎)
对象: (ZIP Sfx o) HBAST.EXE
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: Adware.Hengbang.W (BD 引擎)
对象: (ZIP Sfx o) HBAST.DLL
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: Adware.Hengbang.W (BD 引擎)
对象: (ZIP Sfx o) HAPAST.DLL
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: Adware.Henbang.P (BD 引擎)
对象: (ZIP Sfx o) HENBANG.EXE
在压缩档案里: E:\virus\vir\setup.exe
Status: 已发现病毒
病毒: Adware.Hengbang.W (BD 引擎)
对象: setup.exe
路径: E:\virus\vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.m (3x) (KAV 引擎), Adware.Generic.17815, Adware.Hengbang.W (3x), Adware.Henbang.P (BD 引擎)

显示全部楼层 · 发表于 2008-7-29 20:52:39

[Scanning : C:\Download Files]

C:\Download Files\virus\setup.exe<WISE>:file17 <- Adware.Hengbang.M : No action
C:\Download Files\virus\setup.exe<WISE>:file18 <- Adware.Hengbang.M : No action

Scanned objects : 77

Infected objects : 2

显示全部楼层 · 发表于 2008-7-29 20:53:36

<W32/Heuristic-187!Eldorado (not disinfectable)> C:\Download Files\virus\setup.exe->(ZIP)->CLOSEOEM.EXE
[发现后门：] <W32/Backdoor2.BFME (确切, not disinfectable)> C:\Download Files\virus\setup.exe->(ZIP)->UNWISE32.EXE

显示全部楼层 · 发表于 2008-7-29 20:59:40

[病毒样本] 捆绑1只..

ArcaVir2008

F-Prot 4.4.4