可疑文件

显示全部楼层 · 发表于 2008-8-7 20:29:23

网内流传，其中

mscories.dll

72.5 KB

KNOWN CLEAN

[ 本帖最后由 yk1234 于 2008-8-7 20:33 编辑 ]

显示全部楼层 · 发表于 2008-8-7 20:34:29

C:\Users\Wesley\Downloads\v.rar > RAR > cx475syd7.sys - 可能是 Win32/Rootkit.Agent.NBQ 特洛伊木马的变种
C:\Users\Wesley\Downloads\v.rar > RAR > zxe.sys - Win32/Rootkit.Agent.NGD 特洛伊木马的变种

显示全部楼层 · 发表于 2008-8-7 20:34:33

spider miss all[:1:]

显示全部楼层 · 发表于 2008-8-7 20:42:23

显示全部楼层 · 发表于 2008-8-7 20:43:10

显示全部楼层 · 发表于 2008-8-7 20:44:36

费尔红伞都报毒

C:\Documents and Settings\Administrator\桌面\v.rar>>wu.ex Trojan.Cap873011.ltzi 木马还未处理

显示全部楼层 · 发表于 2008-8-7 20:45:58

[发现安全风险： ] <W32/Agent.BN.gen!Eldorado (not disinfectable, 普通)> C:\Download Files\v.rar->cx475syd7.sys
[发现安全风险： ] <W32/OnlineGames.A.gen!GSA (not disinfectable, 普通)> C:\Download Files\v.rar->wu.ex->(NSPack)->(PE_Patch)

---------------------------------------------------------------------
扫描已结束: 2008-8-7, 20:44:08
用时: 0:00:07

扫描结果:

已扫描的文件:    6
已感染的对象:    2
已清除的对象:    0
已隔离的文件:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-8-7 21:43:32

病毒 2008-08-07 21:42:39 C:\Documents and Settings\Administrator\桌面\v.rar\zxe.sys Win32.Troj.AgentT.ab.49088 清除成功
病毒 2008-08-07 21:42:39 C:\Documents and Settings\Administrator\桌面\v.rar\wu.ex Win32.Troj.Downloader.if.67072 清除成功

显示全部楼层 · 发表于 2008-8-7 22:37:28

RS20.56.32未杀！

显示全部楼层 · 发表于 2008-8-7 22:50:58

Scan Log
Version of virus signature database: 3336 (20080807)
Date: 2008-8-7 Time: 22:50:59
Scanned disks, folders and files: G:\v\v.rar
G:\v\v.rar » RAR » cx475syd7.sys - probably a variant of Win32/Rootkit.Agent.NBQ trojan - was a part of the deleted object
G:\v\v.rar » RAR » mscories.dll - is OK
G:\v\v.rar » RAR » Start.dll - is OK
G:\v\v.rar » RAR » WmpUpdate.dll - is OK
G:\v\v.rar » RAR » wu.ex - is OK
G:\v\v.rar » RAR » zxe.sys - a variant of Win32/Rootkit.Agent.NGD trojan - was a part of the deleted object
Number of scanned objects: 6
Number of threats found: 2
Number of cleaned objects: 2
Time of completion: 22:50:59 Total scanning time: 0 sec (00:00:00)

[病毒样本] 可疑文件

ESET Smart Security

Norman Virus Control 5.99

F-Prot 4.4.4

8/0