[病毒样本] X7

显示全部楼层 · 发表于 2008-8-6 13:21:07

。。。
给DZ运行时搞下来的。。。
生成物。。

显示全部楼层 · 发表于 2008-8-6 13:27:12

2008/8/6 13:24:28 Deleted: Trojan-Clicker.Win32.Agent.bqy C:\Users\Niya\Downloads\7.zip/001
2008/8/6 13:24:30 Deleted: not-a-virus:AdWare.Win32.Virtumonde.aeug C:\Users\Niya\Downloads\7.zip/001_1
2008/8/6 13:24:31 Deleted: Trojan-Spy.Win32.Zbot.bwp C:\Users\Niya\Downloads\7.zip/001_4
2008/8/6 13:24:31 Deleted: Trojan-Clicker.Win32.Agent.bqy C:\Users\Niya\Downloads\7.zip/001_5
2008/8/6 13:24:35 Deleted: Rootkit.Win32.Qandr.bx C:\Users\Niya\Downloads\7.zip/001_6

显示全部楼层 · 发表于 2008-8-6 13:37:15

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Ntos.dm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.56.12

显示全部楼层 · 发表于 2008-8-6 13:39:17

001_4 Win32:Zbot-WJ [Trj]
001_6 Win32:Qandr [Rtk]

显示全部楼层 · 发表于 2008-8-6 13:40:14

avast 2/7

显示全部楼层 · 发表于 2008-8-6 13:40:53

Begin scan in 'C:\Documents and Settings\Nerazzurri\桌面\7.zip'
C:\Documents and Settings\Nerazzurri\桌面\7.zip
[0] Archive type: ZIP
--> 001_5
   [DETECTION] Is the TR/BHO.czn Trojan
--> 001_6
   [DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-6 13:42:07

Begin scan in 'C:\Users\TOSHIBA\Downloads\7'
C:\Users\TOSHIBA\Downloads\7\001_1
[DETECTION] Contains recognition pattern of the ADSPY/Virtumonde.aeug adware or spyware
[NOTE]    A backup was created as '48ca39af.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\7\001_5
[DETECTION] Is the TR/BHO.czn Trojan
[NOTE]    A backup was created as '4a185ed0.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\7\001_6
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    A backup was created as '48ca39b1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年8月6日  13:41
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanning directories
   7 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   3 files were deleted
   0 files were repaired
   3 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   0 Archives were scanned
   0 Warnings
   3 Notes

显示全部楼层 · 发表于 2008-8-6 14:06:21

F:\VIRUS\7.zip » ZIP » 001_1 - Win32/Adware.Antivirus2008 application
F:\VIRUS\7.zip » ZIP » 001_3 - a variant of Win32/TrojanDownloader.FakeAlert.FL trojan
F:\VIRUS\7.zip » ZIP » 001_4 - Win32/Spy.Agent.NHF trojan
F:\VIRUS\7.zip » ZIP » 001_6 - a variant of Win32/Srizbi trojan

显示全部楼层 · 发表于 2008-8-6 14:26:26

微点拦截

显示全部楼层 · 发表于 2008-8-6 15:07:02

风险程序 2008-08-06  15:06:04 C:\Documents and Settings\Administrator\桌面\7.zip\001_1 Win32.Adware.Virtumonde.295424 跳过，未处理
病毒 2008-08-06  15:06:02 C:\Documents and Settings\Administrator\桌面\7.zip\001_6 Win32.Hack.Rootkit.bx.364032 清除成功
病毒 2008-08-06  15:06:02 C:\Documents and Settings\Administrator\桌面\7.zip\001_4 Win32.Troj.Zbot.48640 清除成功

[病毒样本] X7

16/1

3

浏览过的版块