[病毒样本] 6

显示全部楼层 · 发表于 2008-9-7 17:05:59

DELPHI

显示全部楼层 · 发表于 2008-9-7 17:24:41

已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.WOW.bxt 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/DELPICON (1).exe
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.WOW.bxs 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/DELPICON (2).exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Banload.tkj 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/DELPICON (3).exe
已刪除: 病毒 Worm.Win32.AutoRun.lzm 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/DELPICON (5).exe
已刪除: 特洛伊木馬程式 Trojan-Clicker.Win32.Delf.arp 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/DELPICON (6).exe

报5,上报1

显示全部楼层 · 发表于 2008-9-7 17:29:31

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.oce
病毒： Trojan.DL.Win32.Delf.zav
病毒： Trojan.Clicker.Win32.Agent.bkl

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.60.61

显示全部楼层 · 发表于 2008-9-7 17:33:07

Begin scan in 'C:\Users\TOSHIBA\Downloads\4'
C:\Users\TOSHIBA\Downloads\4\DELPICON (1).exe
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '490f9fe6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\4\DELPICON (2).exe
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '4bab342f.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\4\DELPICON (3).exe
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '490f9ff8.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\4\DELPICON (5).exe
[DETECTION] Contains recognition pattern of the WORM/Autorun.lzm worm
[NOTE]    A backup was created as '490f9fe7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\4\DELPICON (6).exe
[DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
[NOTE]    A backup was created as '4bab2390.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-9-7 21:07:28

风险程序 2008-09-07  21:07:11 C:\Documents and Settings\Administrator\桌面\6.rar\VBICON (6).exe Win32.Adware.VB.40960 跳过，未处理
病毒 2008-09-07  21:07:07 C:\Documents and Settings\Administrator\桌面\6.rar\VBICON (5).exe Win32.TrojDownloader.Agent.442368 清除成功
病毒 2008-09-07  21:07:07 C:\Documents and Settings\Administrator\桌面\6.rar\VBICON (4).exe Win32.Hack.Resod.409600 清除成功
病毒 2008-09-07  21:07:07 C:\Documents and Settings\Administrator\桌面\6.rar\VBICON (3).exe Win32.Troj.Agent.376832 清除成功
病毒 2008-09-07  21:07:07 C:\Documents and Settings\Administrator\桌面\6.rar\VBICON (2).exe Worm.AutoRun.146446 清除成功
病毒 2008-09-07  21:07:07 C:\Documents and Settings\Administrator\桌面\6.rar\VBICON (1).exe Win32.Hack.VB.69632 清除成功

显示全部楼层 · 发表于 2008-9-7 21:07:49

McAfee 报了3个。。

delpicon (1).exe new malware.ey
delpicon (2).exe pws-onlinegames.p
delpicon (3).exe pws-banker
delpicon (4).exe no
delpicon (5).exe no
delpicon (6).exe no

显示全部楼层 · 发表于 2008-9-7 23:21:00

显示全部楼层 · 发表于 2008-9-8 08:33:33

我也下个试试去

显示全部楼层 · 发表于 2008-9-8 15:34:30

微点拦截

显示全部楼层 · 发表于 2008-9-10 00:07:03

Hello,

DELPICON_(4).e3xe, VBICON_(3).ex3e, VBICON_(5).exe_

No malicious code were found in these files.

SETUPICON_(1).ex2e - Trojan.Win32.Agent.acuj,
SETUPICON_(2).ex2e - Trojan-Dropper.Win32.Agent.wop,
SETUPICON_(7).ex3e - Backdoor.Win32.Hupigon.dsfl,
SETUPICON_(9).ex3e - Trojan-Dropper.Win32.Agent.woq

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vitaly Butuzov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] 6

7/4

6