若干

显示全部楼层 · 发表于 2008-9-15 13:57:49

里面有一堆驱动。没有仔细鉴别。

显示全部楼层 · 发表于 2008-9-15 14:09:04

费尔2个

显示全部楼层 · 发表于 2008-9-15 14:12:45

Begin scan in 'D:\Virus\drive'
D:\Virus\drive\drive\C\d.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\C\d1.exe
[0] Archive type: OVL
--> Object
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\C\kcso.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\C\vjha.exe
[DETECTION] Is the TR/Drop.Agent.whx Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\C\ypladn.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\F\Program Files\Internet Explorer\setupapi.dll
[DETECTION] Is the TR/Agent.abop Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\F\Windows\jnrve.exe
[DETECTION] Contains recognition pattern of the ADSPY/Weboc adware or spyware
[NOTE]    The file was deleted!
D:\Virus\drive\drive\F\Windows\system32\Cpl32ver.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\F\Windows\system32\drivers\crack.sys
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\F\Windows\system32\drivers\ipinip.sys
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\F\Windows\system32\drivers\nwlnkflt.sys
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\drive\drive\F\Windows\system32\drivers\nwlnkfwd.sys
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!

End of the scan: 2008年9月15日  14:12
Used time: 00:07 Minute(s)

The scan has been done completely.

   10 Scanning directories
   49 Files were scanned
   12 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   12 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   37 Files not concerned
   0 Archives were scanned
   0 Warnings
   12 Notes

显示全部楼层 · 发表于 2008-9-15 14:19:34

微点特征码只报一个
木马名称:Trojan-Downloader.Win32.AI.a

程序:
C:\DOWNLOADS\DRIVE\F\WINDOWS\JNRVE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-9-15 14:30:53

信息 2008-09-15  14:30:30 您此次查毒隔离了5个文件
信息 2008-09-15  14:30:30 您此次查毒共查出5个病毒以及危险代码
信息 2008-09-15  14:30:30 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件51个
信息 2008-09-15  14:30:30 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-09-15  14:30:30 D:\Desktop\drive\drive\F\Windows\system32\ilory.exe Win32.TrojDownloader.rc.36864 隔离成功
病毒 2008-09-15  14:30:30 D:\Desktop\drive\drive\F\Windows\system32\drivers\absedrv.sys Win32.Hack.VMProtectT.a.851968 隔离成功
病毒 2008-09-15  14:30:30 D:\Desktop\drive\drive\F\Windows\jnrve.exe Win32.TrojDownloader.ad.61440 隔离成功
病毒 2008-09-15  14:30:30 D:\Desktop\drive\drive\F\Program Files\Internet Explorer\setupapi.dll Win32.Troj.Agent.52736 隔离成功
病毒 2008-09-15  14:30:29 D:\Desktop\drive\drive\C\vjha.exe Win32.VirInstaller.Agent.34816 隔离成功

显示全部楼层 · 发表于 2008-9-15 16:17:27

学习中

显示全部楼层 · 发表于 2008-9-15 18:57:48

报了三个，其余上报
2008/9/15 18:56:47 已删除木马程序 Trojan.Win32.Agent.abop G:\Temp\Virus\drive\drive\F\Program Files\Internet Explorer\setupapi.dll
2008/9/15 18:56:47 已删除木马程序 Trojan-Dropper.Win32.Agent.whx G:\Temp\Virus\drive\drive\C\vjha.exe
2008/9/15 18:56:47 已隔离木马程序 Heur.Invader G:\Temp\Virus\drive\drive\C\kcso.exe

显示全部楼层 · 发表于 2008-9-15 22:45:33

包包够大，我这人有毛病，对大号病毒不感兴趣。

[病毒样本] 若干

本帖子中包含更多资源

本帖子中包含更多资源