9个~~

显示全部楼层 · 发表于 2008-8-14 00:45:52

夜了~没人~睡觉~

样本里有最近听讲过的“黑失败”的两个新版

显示全部楼层 · 发表于 2008-8-14 08:49:39

清空
Starting the file scan:

Begin scan in 'C:\Users\Morgan\Desktop\1'
C:\Users\Morgan\Desktop\1\
  1.exe
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/Agent.wwc Trojan
   --> Object
      [1] Archive type: Runtime Packed
      --> Object
[NOTE]    The file was deleted!
  123.exe
[DETECTION] Is the TR/Agent.1111068.3 Trojan
[NOTE]    The file was deleted!
  2.exe
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/Agent.wwc Trojan
--> Object
[NOTE]    The file was deleted!
  4.exe
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/Agent.WME.5 Trojan
[NOTE]    The file was deleted!
  CServer.dat
[DETECTION] Contains recognition pattern of the DR/Delf.dgt.11 dropper
[NOTE]    The file was deleted!
  heishibaikhd.dll
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/Agent.WME.5 Trojan
[NOTE]    The file was deleted!
  tr.exe
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    The file was deleted!
  vIDCc.dll
[DETECTION] Contains recognition pattern of the SPR/Proxy.Q program
[NOTE]    The file was deleted!
  运行端.exe
[DETECTION] Is the TR/Dldr.Tiny.T2.1 Trojan
[NOTE]    The file was deleted!

End of the scan: 2008年8月14日  08:52
Used time: 00:05 Minute(s)

The scan has been done completely.

   1 Scanning directories
   9 Files were scanned
   9 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   9 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   9 Notes

显示全部楼层 · 发表于 2008-8-14 09:31:17

卡巴454全报木马。

显示全部楼层 · 发表于 2008-8-14 09:49:48

费尔6个

显示全部楼层 · 发表于 2008-8-14 10:50:36

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\HEISHIBAIKHD\HEISHIBAIKHD.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-8-14 11:14:45

avast! 运行端不报其它都报

显示全部楼层 · 发表于 2008-8-14 11:38:09

谁有ESET的报告？

显示全部楼层 · 发表于 2008-8-14 21:42:52

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Gpigeon2008.x

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.57.32

显示全部楼层 · 发表于 2008-8-14 22:08:16

C:\Documents and Settings\Administrator\桌面\1.rar > RAR > 4.exe - Win32/Packed.Themida 应用程序的变种
C:\Documents and Settings\Administrator\桌面\5.rar > RAR > CServer.dat > CAB > server.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\Administrator\桌面\5.rar > RAR > CServer.dat > CAB > SERVER~1.EXE - Win32/Hupigon 特洛伊木马
C:\Documents and Settings\Administrator\桌面\heishibaikhd.rar > RAR > heishibaikhd.dll - Win32/Packed.Themida 应用程序的变种

[病毒样本] 9个~~

25/6

回复 8楼 chenyilong58 的帖子