banker*16

显示全部楼层 · 发表于 2008-8-1 14:13:10

今天+昨天。。。
地址：http://xianexs.mail.qq.com/cgi-bin/downloadfilepart/svrid224/Downloads.rar?svrid=224&fid=0d4d0f12a936d99aa0808d6db66ffbbc8ee9bf1983b5fffa&&txf_fid=48ec31b630850528f1cbf98003d233a09d2e2df3&&txf_sid=efacc716ce3be2a7c6bf35d7cbb0325970c78b1a
(提取码 369f3d9f)

显示全部楼层 · 发表于 2008-8-1 14:15:44

Scan Log
Version of virus signature database: 3316 (20080731)
Date: 2008-8-1 Time: 14:15:13
Scanned disks, folders and files: G:\v\Downloads
G:\v\Downloads\auto.jpg - Win32/Spy.Banker.OYK trojan - cleaned by deleting - quarantined [1]
G:\v\Downloads\daniel.jpg - is OK
G:\v\Downloads\dllhostc.pif » PECompact v2.xx - is OK
G:\v\Downloads\Explorer.xml - is OK
G:\v\Downloads\file_kt.jpg - is OK
G:\v\Downloads\gbiehdst.js » ASPack v2.12 - is OK
G:\v\Downloads\gbplib.js - is OK
G:\v\Downloads\gbppdist.js - is OK
G:\v\Downloads\hork.bmp - a variant of Win32/TrojanDropper.Delf.NFK trojan - cleaned by deleting - quarantined [1]
G:\v\Downloads\imglog.jpg - is OK
G:\v\Downloads\imglog.pif - is OK
G:\v\Downloads\jumper.pif - is OK
G:\v\Downloads\kilador.wmf - Win32/Spy.Banker.OTG trojan - cleaned by deleting - quarantined [1]
G:\v\Downloads\orkut.jpg » PECompact v2.xx - is OK
G:\v\Downloads\process(1).jpg - a variant of Win32/Packed.Themida application - cleaned by deleting - quarantined [1]
G:\v\Downloads\xms.jpg - a variant of Win32/TrojanDropper.Delf.NFK trojan - cleaned by deleting - quarantined [1]
Number of scanned objects: 16
Number of threats found: 5
Number of cleaned objects: 5
Time of completion: 14:15:48 Total scanning time: 35 sec (00:00:35)

Notes:
[1] Object has been deleted as it only contained the virus body.

显示全部楼层 · 发表于 2008-8-1 14:18:58

费尔5个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Packer.Win32.Mian007.a
病毒： Packer.Win32.Agent.r
病毒： Trojan.DL.Win32.Dadobra.ahk
病毒： Trojan.Win32.Xcomp.a
病毒： Trojan.Spy.Win32.Delf.cfb

用户来源：互联网

软件版本：20.55.40

显示全部楼层 · 发表于 2008-8-1 14:20:05

显示全部楼层 · 发表于 2008-8-1 14:21:51

IK AVK 的试试。。。~

显示全部楼层 · 发表于 2008-8-1 14:26:42

Begin scan in 'C:\Users\TOSHIBA\Downloads\Downloads'
C:\Users\TOSHIBA\Downloads\Downloads\auto.jpg
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '4906ace4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\daniel.jpg
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    A backup was created as '4900acd0.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\dllhostc.pif
   [DETECTION] Contains HEUR/Crypted.E suspicious code
[NOTE]    A backup was created as '48feacdc.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\Explorer.xml
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '4902ace8.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\gbiehdst.js
[DETECTION] Is the TR/Spy.Delf.dhj Trojan
[NOTE]    A backup was created as '48fbacd2.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\gbplib.js
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4902acd2.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\gbppdist.js
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4b9407db.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\hork.bmp
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '4904acdf.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\imglog.jpg
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '48f9acdd.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\imglog.pif
[DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
[NOTE]    A backup was created as '4a6f008e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\jumper.pif
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '48fface5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\kilador.wmf
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    A backup was created as '48feacd9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\orkut.jpg
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '48fdace2.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\process(1).jpg
[DETECTION] Is the TR/Spy.Banker.Gen Trojan
[NOTE]    A backup was created as '4901ace3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\Downloads\xms.jpg
[DETECTION] Is the TR/Agent.ZR.6 Trojan
[NOTE]    A backup was created as '4905acde.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年8月1日  14:25
Used time: 00:04 Minute(s)

The scan has been done completely.

   1 Scanning directories
   16 Files were scanned
   14 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   15 files were deleted
   0 files were repaired
   15 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   0 Archives were scanned
   0 Warnings
   15 Notes

显示全部楼层 · 发表于 2008-8-1 14:26:54

2008-8-1 14:26:10 Kernel File  'G:\v\Downloads\jumper.pif' was sent to ESET for analysis.
2008-8-1 14:24:08 Kernel File  'G:\v\Downloads\imglog.pif' was sent to ESET for analysis.
2008-8-1 14:21:26 Kernel File  'G:\v\Downloads\gbppdist.js' was sent to ESET for analysis.
2008-8-1 14:21:11 Kernel File  'G:\v\Downloads\gbplib.js' was sent to ESET for analysis.
2008-8-1 14:20:51 Kernel File  'G:\v\Downloads\gbiehdst.js' was sent to ESET for analysis.
2008-8-1 14:17:21 Kernel File  'G:\v\Downloads\Explorer.xml' was sent to ESET for analysis.
2008-8-1 14:16:43 Kernel File  'G:\v\Downloads\dllhostc.pif' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-8-1 14:27:54

The file 'file_kt.jpg' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

显示全部楼层 · 发表于 2008-8-1 14:31:04

原帖由 电影结束了 于 2008-8-1 14:13 发表
今天+昨天。。。
地址：http://xianexs.mail.qq.com/cgi-bin/downloadfilepart/svrid224/Downloads.rar?svrid=224&fid=0d4d0f12a936d99aa0808d6db66ffbbc8ee9bf1983b5fffa&&txf_fid=48ec31b630850528f1cbf98003d233 ...

显示全部楼层 · 发表于 2008-8-1 14:36:39

微点拦截

[病毒样本] banker*16

mcafee:6

回复 6楼 Kitman 的帖子