我的隔离区里面找到的

显示全部楼层 · 发表于 2008-8-30 00:13:56

不知道质量

显示全部楼层 · 发表于 2008-8-30 00:21:29

Starting the file scan:

Begin scan in 'G:\vicure'
G:\vicure\vicure.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.sos
   [NOTE]    The file was deleted!
Begin scan in 'G:\Desktop'
G:\Desktop\dvsetup_smile.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.buc.1
   [NOTE]    The file was deleted!
G:\Desktop\pu_setup.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.jlu
   [NOTE]    The file was deleted!
G:\Desktop\vicbk.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.exs.7
   [NOTE]    The file was deleted!
G:\Desktop\vicrbm2.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.exs.18
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-30 01:55:39

2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.buc G:\Temp\Virus\Desktop.zip/Desktop/dvsetup_smile.exe
2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.jlu G:\Temp\Virus\Desktop.zip/Desktop/pu_setup.exe
2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.exs G:\Temp\Virus\Desktop.zip/Desktop/vicbk.exe
2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.exs G:\Temp\Virus\Desktop.zip/Desktop/vicrbm2.exe
2008/8/30 1:54:46 已清除木马程序 Trojan-Downloader.Win32.Agent.sos G:\Temp\Virus\vicure.zip/vicure.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2008-8-30 07:13:04

显示全部楼层 · 发表于 2008-8-30 07:54:33

C:\Documents and Settings\Administrator\桌面\Desktop.zip>>Desktop\dvsetup_smile.exe TrojanDownloader.Agent.buc.ksuw 木马还未处理
C:\Documents and Settings\Administrator\桌面\Desktop.zip>>Desktop\pu_setup.exe TrojanDownloader.Agent.vsn.jycl 木马还未处理
C:\Documents and Settings\Administrator\桌面\Desktop.zip>>Desktop\vicbk.exe TrojanDownloader.Agent.exs.nmgi 木马还未处理
C:\Documents and Settings\Administrator\桌面\Desktop.zip>>Desktop\vicrbm2.exe TrojanDownloader.Agent.exs.hmbv 木马还未处理
C:\Documents and Settings\Administrator\桌面\vicure.zip>>vicure.exe TrojanDownloader.Agent.sos.lbkx 木马还未处理

显示全部楼层 · 发表于 2008-8-30 08:45:47

[Scanning : C:\Download Files]

C:\Download Files\Desktop.zip<ZIP>:dvsetup_smile.exe <- Downloader.Agent.Buc : No action
C:\Download Files\Desktop.zip<ZIP>:pu_setup.exe <- Downloader.Agent.Jlu : No action
C:\Download Files\Desktop.zip<ZIP>:vicbk.exe <- Downloader.Agent.Exs : No action
C:\Download Files\vicure.zip<ZIP>:vicure.exe<UPX>:vicure.exe <- Downloader.Agent.Sos : No action

Scanned objects : 13

Infected objects : 4

显示全部楼层 · 发表于 2008-8-30 08:46:52

<W32/Downldr2.MGA (确切, not disinfectable)> C:\Download Files\Desktop.zip->Desktop/dvsetup_smile.exe <W32/Trojan2.AFIP (确切, not disinfectable)> C:\Download Files\Desktop.zip->Desktop/pu_setup.exe
<W32/Downldr2.BBWE (确切, not disinfectable)> C:\Download Files\Desktop.zip->Desktop/vicbk.exe
<W32/Downldr2.AKTZ (确切, not disinfectable)> C:\Download Files\Desktop.zip->Desktop/vicrbm2.exe

显示全部楼层 · 发表于 2008-8-30 09:00:49

Scan Log
Version of virus signature database: 3401 (20080829)
Date: 2008-8-30 Time: 9:01:31
Scanned disks, folders and files: G:\v\Desktop.zip
G:\v\Desktop.zip » ZIP » Desktop/dvsetup_smile.exe - probably a variant of Win32/TrojanDownloader.Agent trojan - was a part of the deleted object
G:\v\Desktop.zip » ZIP » Desktop/pu_setup.exe - Win32/Adware.PointUrl application - was a part of the deleted object
G:\v\Desktop.zip » ZIP » Desktop/vicbk.exe - probably a variant of Win32/TrojanDownloader.Agent trojan - was a part of the deleted object
G:\v\Desktop.zip » ZIP » Desktop/vicrbm2.exe - probably a variant of Win32/TrojanDownloader.Agent trojan - was a part of the deleted object
Number of scanned objects: 4
Number of threats found: 4
Number of cleaned objects: 4
Time of completion: 9:01:31 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2008-8-30 09:01:15

Scan Log
Version of virus signature database: 3401 (20080829)
Date: 2008-8-30 Time: 9:02:04
Scanned disks, folders and files: G:\v\vicure.zip
G:\v\vicure.zip » ZIP » vicure.exe - probably a variant of Win32/TrojanDownloader.Agent trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 9:02:05 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2008-8-30 17:20:51

看来质量不行

[病毒样本] 我的隔离区里面找到的

ArcaVir2008

F-Prot 4.4.4