BANKER 11X

qianwenxiang

http://exs.mail.foxmail.com/cgi-bin/downloadfilepart/svrid5/imglog.rar?svrid=5&fid=3161b0f4104041d2f6a257a2212edafb35d8591b9239d147&&txf_fid=e94ad50c4b3081459b07cc57fe842f517b0f9379&&txf_sid=48f419c60c6a122ac9853b259c238f47c5d4bd27

(提取码：186da3b6)

以上由电影收集整理

sltgr

KIS2009:清空

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.Upack.a     
病毒： Packer.Win32.Mian007.a   
病毒： Trojan.PSW.OnlineGames.ath

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.55.62

Palkia

病毒        2008-08-03  21:01:34        C:\Documents and Settings\Administrator\桌面\imglog.rar\imglog.xml        Win32.Hack.xPacker.a.31980        清除成功       
病毒        2008-08-03  21:01:33        C:\Documents and Settings\Administrator\桌面\imglog.rar\orkutkut.pif        Win32.Hack.xPacker.a.31980        清除成功       
病毒        2008-08-03  21:01:33        C:\Documents and Settings\Administrator\桌面\imglog.rar\lua3.gif        Win32.Hack.UpackT.a.15981        清除成功       
病毒        2008-08-03  21:01:33        C:\Documents and Settings\Administrator\桌面\imglog.rar\lua2.gif        Win32.Hack.UpackT.a.15981        清除成功       
病毒        2008-08-03  21:01:33        C:\Documents and Settings\Administrator\桌面\imglog.rar\lua1.gif        Win32.Hack.UpackT.a.15981        清除成功

BING126

McAfee   7个。。。

傻猪猪米走鸡

ess 4

Kitman

Starting the file scan:

Begin scan in 'C:\Users\TOSHIBA\Downloads\imglog'
C:\Users\TOSHIBA\Downloads\imglog\birita1.gif
    [DETECTION] Contains HEUR/Crypted.E suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '4907c935.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\birita2.gif
    [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
    [NOTE]      A backup was created as '4bad4ea6.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\birita3.gif
    [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      A backup was created as '4907c937.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\imglog.xml
    [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
    [NOTE]      A backup was created as '48fcc939.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\inbox_k.gif
    [DETECTION] Is the TR/Spy.Banker.Gen Trojan
    [NOTE]      A backup was created as '48f7c93a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\inbox_w.gif
    [DETECTION] Is the TR/Drop.Agent.rnd.13 Trojan
    [NOTE]      A backup was created as '4a5d4eab.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\kl.jpg
    [0] Archive type: RSRC
    --> Object
      [DETECTION] Is the TR/Spy.Banker.Gen Trojan
    [NOTE]      A backup was created as '48c3c938.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\lua1.gif
    [DETECTION] Is the TR/Spy.Banker.mlk Trojan
    [NOTE]      A backup was created as '48f6c941.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\lua2.gif
    [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
    [NOTE]      A backup was created as '48f6c942.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\lua3.gif
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4a5c4ed3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\imglog\orkutkut.pif
    [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
    [NOTE]      A backup was created as '4900c93f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年8月3日  23:03
Used time: 00:03 Minute(s)

The scan has been done completely.

      1 Scanning directories
     11 Files were scanned
     10 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     11 files were deleted
      0 files were repaired
     11 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     11 Notes

kkgh

费尔8个

啊弥陀佛

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\IMGLOG\LUA2.GIF.EXE
木马程序生成以下文件:
1) C:\ARQUIVOS DE PROGRAMAS\INTERNET EXPLORER\6.5\IEXPLORE.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\IMGLOG\KL.JPG.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\PLUG.SYS
2) C:\TUTO.EXE
3) C:\ARQUIVOS DE PROGRAMAS\AVG.EXE
4) C:\WINDOWS\SYSTEM32\SVCHOSTS.EXE
是否删除木马程序及其衍生物?