2个

显示全部楼层 · 发表于 2008-8-30 00:07:48

随便乱猜的下载地址，没想到居然真的能下到

显示全部楼层 · 发表于 2008-8-30 00:10:11

D:\病毒测试\临时解压\Desktop.zip:\1.exe - 特征码 'Win32.Rigel.6468' 被发现
D:\病毒测试\临时解压\Desktop.zip:\2.exe - 特征码 'Trojan-Downloader.Agent.pmd.2' 被发现
D:\病毒测试\临时解压\Desktop.zip

3 文件被扫描
(1 压缩档 2 文件)
2 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.320

显示全部楼层 · 发表于 2008-8-30 00:12:03

估计是大众快餐

显示全部楼层 · 发表于 2008-8-30 00:16:52

The file 'G:\Desktop\1.exe'
contained a virus or unwanted program 'TR/Crypt.XPACK.Gen' [trojan]
Action(s) taken:The file was deleted!

The file 'G:\Desktop\2.exe'
contained a virus or unwanted program 'TR/Dldr.Agent.pmd.2' [trojan]
Action(s) taken:The file was deleted!

ps.SVS装不上了 antivir也就此报销了幸亏有绿色版.

显示全部楼层 · 发表于 2008-8-30 01:19:33

不好意思我懒得截图了还是被红伞干掉了

显示全部楼层 · 发表于 2008-8-30 01:56:50

2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.buc G:\Temp\Virus\Desktop.zip/Desktop/dvsetup_smile.exe
2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.jlu G:\Temp\Virus\Desktop.zip/Desktop/pu_setup.exe
2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.exs G:\Temp\Virus\Desktop.zip/Desktop/vicbk.exe
2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.exs G:\Temp\Virus\Desktop.zip/Desktop/vicrbm2.exe

显示全部楼层 · 发表于 2008-8-30 06:58:08

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... fa&t=1220050668
Information: Is the TR/Crypt.XPACK.Gen Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.92

显示全部楼层 · 发表于 2008-8-30 07:58:02

C:\Documents and Settings\Administrator\桌面\Desktop.zip>>1.exe Trojan.Monderb.fpq.eqzq 木马还未处理
C:\Documents and Settings\Administrator\桌面\Desktop.zip>>2.exe TrojanDownloader.Agent.pmd.2.bclh 木马还未处理

显示全部楼层 · 发表于 2008-8-30 08:20:54

<W32/Trojan2.BDWZ (确切, not disinfectable)> C:\Download Files\Desktop.zip->2.exe->(UPX)

显示全部楼层 · 发表于 2008-8-30 08:21:15

C:\Download Files\Desktop.zip<ZIP>:1.exe <- Heur.W32 : No action
C:\Download Files\Desktop.zip<ZIP>:2.exe<UPX>:2.exe <- Trojan.Agent.Tvy : No action

[病毒样本] 2个

F-Prot 4.4.4

ArcaVir2008

浏览过的版块