[病毒样本] one

显示全部楼层 · 发表于 2008-9-1 14:52:25

被病毒替换了的文件

谁能帮忙把原系统文件传上来 alg.exe ctfmon.exe wauclt.exe conime.exe debug.exe xp sp2的原系统文件

显示全部楼层 · 发表于 2008-9-1 15:08:11

tis2008杀

显示全部楼层 · 发表于 2008-9-1 15:45:08

Requested URL: http://bbs.kafan.cn/attachment.p ... 43&t=1220255097
Information: Is the TR/PSW.QQpass.dcg.1 Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.95

显示全部楼层 · 发表于 2008-9-1 16:17:37

Begin scan in 'C:\桌面.rar'
C:\桌面.rar
[0] Archive type: RAR
--> d.exe
   [DETECTION] Is the TR/PSW.QQpass.dcg.1 Trojan
   --> lg.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
   --> nime.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
   --> on.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
   --> auclt.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
   --> nn.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was moved to '48ea3c6a.qua'!

End of the scan: 2008年9月1日  16:17
Used time: 00:05 Minute(s)

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-9-1 19:31:16

金山 6

显示全部楼层 · 发表于 2008-9-1 20:50:09

McAfee d.exe generic pws.y

显示全部楼层 · 发表于 2008-9-2 22:28:00

2008/9/2 22:27:35 已清除木马程序 Trojan.Win32.KillAV.alu G:\Temp\Virus\桌面.rar/on.exe//PE_Patch//UPack
2008/9/2 22:27:35 已清除木马程序 Trojan.Win32.KillAV.alu G:\Temp\Virus\桌面.rar/nn.exe//PE_Patch//UPack
2008/9/2 22:27:35 已清除木马程序 Trojan.Win32.KillAV.alu G:\Temp\Virus\桌面.rar/nime.exe//PE_Patch//UPack
2008/9/2 22:27:35 已清除木马程序 Trojan.Win32.KillAV.alu G:\Temp\Virus\桌面.rar/lg.exe//PE_Patch//UPack
2008/9/2 22:27:35 已清除木马程序 Trojan-PSW.Win32.QQPass.dcg G:\Temp\Virus\桌面.rar/d.exe//PE_Patch//UPack
2008/9/2 22:27:35 已清除木马程序 Trojan.Win32.KillAV.alu G:\Temp\Virus\桌面.rar/auclt.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-9-2 22:29:50

还没下完··············

显示全部楼层 · 发表于 2008-9-3 09:05:15

d.exe - Win32/TrojanDownloader.Agent.OCS 木马
lg.exe - 未知的 NewHeur_PE 病毒 [7]
nime.exe - 未知的 NewHeur_PE 病毒 [7]
on.exe - 未知的 NewHeur_PE 病毒 [7]
auclt.exe - 未知的 NewHeur_PE 病毒 [7]
nn.exe - 未知的 NewHeur_PE 病毒 [7]