[病毒样本] 6

显示全部楼层 · 发表于 2008-9-7 17:17:41

2008/9/7 17:19:37 已删除: Backdoor.Win32.VB.ctm D:\6.rar/VBICON (1).exe
2008/9/7 17:19:37 已删除: Worm.Win32.AutoRun.lsy D:\6.rar/VBICON (2).exe
2008/9/7 17:19:37 已删除: Trojan-DDoS.Win32.Resod D:\6.rar/VBICON (4).exe
2008/9/7 17:19:37 已删除: Trojan-Clicker.Win32.VB.bvl D:\6.rar/VBICON (6).exe

显示全部楼层 · 发表于 2008-9-7 17:19:34

结果跟楼上的一样,不报的已上报

显示全部楼层 · 发表于 2008-9-7 17:24:20

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Agent.agj
病毒： Trojan.DL.Agent.bws

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.60.61

显示全部楼层 · 发表于 2008-9-7 17:30:37

Begin scan in 'C:\Users\TOSHIBA\Downloads\6'
C:\Users\TOSHIBA\Downloads\6\VBICON (1).exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/VB.ctm back-door program
[NOTE]    A backup was created as '490c9f53.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\6\VBICON (2).exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    A backup was created as '4bca8d0c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\6\VBICON (3).exe
[DETECTION] Contains HEUR/Crypted suspicious code
[NOTE]    The detection was classified as suspicious.
[NOTE]    A backup was created as '4baf349c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\6\VBICON (4).exe
[DETECTION] Contains HEUR/Malware suspicious code
[NOTE]    The detection was classified as suspicious.
[NOTE]    A backup was created as '490c9f54.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\6\VBICON (5).exe
[DETECTION] Contains HEUR/Crypted suspicious code
[NOTE]    The detection was classified as suspicious.
[NOTE]    A backup was created as '4baf349d.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\6\VBICON (6).exe
[DETECTION] Is the TR/Click.VB.bvl Trojan
[NOTE]    A backup was created as '490c9f56.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年9月7日  17:29
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   3 viruses and/or unwanted programs were found
   3 Files were classified as suspicious:
   6 files were deleted
   0 files were repaired
   6 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   6 Notes

显示全部楼层 · 发表于 2008-9-7 21:07:59

风险程序 2008-09-07  21:07:44 C:\Documents and Settings\Administrator\桌面\4.rar\DELPICON (6).exe Win32.Adware.Delf.563712 跳过，未处理
病毒 2008-09-07  21:07:42 C:\Documents and Settings\Administrator\桌面\4.rar\DELPICON (5).exe Worm.AutoRun.457216 清除成功
病毒 2008-09-07  21:07:42 C:\Documents and Settings\Administrator\桌面\4.rar\DELPICON (4).exe Win32.TrojDownloader.Delf.954368 清除成功
病毒 2008-09-07  21:07:42 C:\Documents and Settings\Administrator\桌面\4.rar\DELPICON (3).exe Win32.TrojDownloader.Banload.170086 清除成功
病毒 2008-09-07  21:07:42 C:\Documents and Settings\Administrator\桌面\4.rar\DELPICON (2).exe Win32.Troj.Games.c.147456 清除成功
病毒 2008-09-07  21:07:42 C:\Documents and Settings\Administrator\桌面\4.rar\DELPICON (1).exe Win32.Troj.Games.c.147456 清除成功

显示全部楼层 · 发表于 2008-9-7 21:29:31

McAfee 报了3个。。

vbicon (1).exe    no
vbicon (2).exe    w32/autorun.worm.h
vbicon (3).exe    dollarrevenue
vbicon (4).exe    no
vbicon (5).exe    dollarrevenue
vbicon (6).exe    no

显示全部楼层 · 发表于 2008-9-7 23:16:26

avast！ miss 1

显示全部楼层 · 发表于 2008-9-10 00:08:42

Hello,

DELPICON_(4).e3xe, VBICON_(3).ex3e, VBICON_(5).exe_

No malicious code were found in these files.

SETUPICON_(1).ex2e - Trojan.Win32.Agent.acuj,
SETUPICON_(2).ex2e - Trojan-Dropper.Win32.Agent.wop,
SETUPICON_(7).ex3e - Backdoor.Win32.Hupigon.dsfl,
SETUPICON_(9).ex3e - Trojan-Dropper.Win32.Agent.woq

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vitaly Butuzov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] 6

8/2

6