[病毒样本] 6

显示全部楼层 · 发表于 2008-9-7 17:01:45

JPG图标

显示全部楼层 · 发表于 2008-9-7 17:28:55

已刪除: 病毒 Worm.Win32.AutoRun.mgy 檔案: C:\Documents and Settings\kato9096\桌面\----1.rar/PICICON (1).exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.driy 檔案: C:\Documents and Settings\kato9096\桌面\----1.rar/PICICON (2).exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.driz 檔案: C:\Documents and Settings\kato9096\桌面\----1.rar/PICICON (3).exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.dptr 檔案: C:\Documents and Settings\kato9096\桌面\----1.rar/PICICON (4).exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.driq 檔案: C:\Documents and Settings\kato9096\桌面\----1.rar/PICICON (5).exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.drio 檔案: C:\Documents and Settings\kato9096\桌面\----1.rar/PICICON (6).exe

报6,沒有不报

显示全部楼层 · 发表于 2008-9-7 17:32:00

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Win32.DownLoad.ir
病毒： Backdoor.Win32.RemoteABC.rs
病毒： Backdoor.Win32.RemoteABC.ry
病毒： Backdoor.Win32.RemoteABC.qv

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.60.61

显示全部楼层 · 发表于 2008-9-7 17:35:36

egin scan in 'C:\1.rar'
C:\1.rar
[0] Archive type: RAR
--> PICICON (1).exe
   [DETECTION] Contains HEUR/Crypted suspicious code
--> PICICON (2).exe
   [DETECTION] Is the TR/Dldr.Agent.ryq.1 Trojan
   --> PICICON (4).exe
      [DETECTION] Is the TR/Drop.Agent.NAJ.2 Trojan
   --> PICICON (5).exe
      [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    The file was moved to '4935a07f.qua'!

End of the scan: 2008年9月7日  17:35
Used time: 00:07 Minute(s)

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   0 viruses and/or unwanted programs were found
   4 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-9-7 20:33:42

McAfee  报了2个。。

picicon (1).exe generic dropper.bi
picicon (2).exe no
picicon (3).exe no
picicon (4).exe no
picicon (5).exe new malware.ix
picicon (6).exe no

显示全部楼层 · 发表于 2008-9-7 21:17:20

病毒 2008-09-07  21:17:05 C:\Documents and Settings\Administrator\桌面\1.rar\PICICON (6).exe Win32.Hack.RemoteABC.rs.375296 清除成功
病毒 2008-09-07  21:17:05 C:\Documents and Settings\Administrator\桌面\1.rar\PICICON (5).exe Win32.Hack.RemoteABC.qv.374784 清除成功
病毒 2008-09-07  21:17:05 C:\Documents and Settings\Administrator\桌面\1.rar\PICICON (4).exe Win32.Hack.Huigezi.382464 清除成功
病毒 2008-09-07  21:17:05 C:\Documents and Settings\Administrator\桌面\1.rar\PICICON (3).exe Win32.Hack.RemoteABC.rs.381952 清除成功
病毒 2008-09-07  21:17:05 C:\Documents and Settings\Administrator\桌面\1.rar\PICICON (2).exe Win32.Hack.Beal.a.406528 清除成功

显示全部楼层 · 发表于 2008-9-7 23:19:32

显示全部楼层 · 发表于 2008-9-8 16:10:56

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1\PICICON (4).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\REMOTE\REMOTE.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1\PICICON (5).EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\SPCOOLV.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1\PICICON (6).EXE
木马程序生成以下文件:
1) C:\WINDOWS\0814.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-9-8 16:14:07

卡巴表现不错！2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 已检测到: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 已检测到: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 拒绝: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 拒绝: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 已检测到: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 拒绝: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 已检测到: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 拒绝: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 已检测到: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:06 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe ThunderS Module 拒绝: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:08 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe Internet Explorer 已检测到: Worm.Win32.AutoRun.mgy
2008-9-8 16:13:08 http://bbs.kafan.cn/attachment.p ... 1220861475//PICICON (1).exe Internet Explorer 拒绝: Worm.Win32.AutoRun.mgy

[病毒样本] 6

11/5