31个,大包!!

显示全部楼层 · 发表于 2008-9-24 20:09:26

卡巴有21个不报,不报的上报卡巴!!!!

显示全部楼层 · 发表于 2008-9-24 20:12:29

瑞星检测结果

病毒名称	处理结果	文件
Backdoor.Win32.Gpigeon.2007.a	删除成功	360.DLL3>>nspack
Backdoor.Gpigeon.rat	删除成功	360.exe3>>nspack
Dropper.Win32.Undef.cb	删除成功	8B2H1OMJTVT.exe3
Backdoor.Win32.Jusi.dm	删除成功	eee.exe3>>upx_c
Dropper.Win32.Undef.cb	删除成功	FPU3XK.exe3
Packer.Win32.Agent.v	删除成功	hyjkibxk.dll
Dropper.Win32.Undef.cb	删除成功	JKOXVVV926.ex3e
Trojan.Clicker.Win32.Agent.blm	删除成功	liba.exe3
Backdoor.Win32.IRCbot.faz	删除成功	NewestPicture0012.JPEG-www.imageshack.com3
Trojan.DL.Win32.Undef.avu	删除成功	not.exe3>>upx_c
Dropper.Win32.Undef.cb	删除成功	OS2IOTC6EP.exe3
AdWare.Win32.Dodolook.hw	删除成功	pnpmem.sys3
Dropper.Win32.Undef.cb	删除成功	REPACF5.exe3
Harm.Win32.Agent.al	删除成功	rere.exe3
Packer.Win32.Agent.v	删除成功	vrwbjtie.dll
Worm.Win32.Autorun.evf	删除成功	weiai.exe3
Dropper.Win32.Undef.cb	删除成功	WEQL7FYP7F7L.exe3
Dropper.Win32.Undef.cb	删除成功	YD8GYT86CMC.exe3
Dropper.Win32.Undef.cb	删除成功	Z1KC9KX9.ex3e
Win32.Parite.a	删除成功	zhc3F.tmp3

文件：122 扫描：20

另附上驱逐舰杀毒效果

[ 本帖最后由 kingmuro 于 2008-9-24 20:18 编辑 ]

显示全部楼层 · 发表于 2008-9-24 20:14:02

显示全部楼层 · 发表于 2008-9-24 20:16:56

看不到2楼的结果

显示全部楼层 · 发表于 2008-9-24 20:21:54

病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\新建文件夹.exe3 Worm.Autorun.1245184 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\zhc3F.tmp3 Win32.Troj.Packed.nv.176128 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\Z1KC9KX9.ex3e Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\YD8GYT86CMC.exe3 Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\ybmsp.sys3 Win32.Troj.AgentKit.d.29120 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\WEQL7FYP7F7L.exe3 Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\rere.exe3 Win32.Troj.AgentT.bv.28672 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\REPACF5.exe3 Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\pnpmem.sys3 Win32.Troj.SysJunkT.hh 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\OS2IOTC6EP.exe3 Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\JKOXVVV926.ex3e Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\FPU3XK.exe3 Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\eee.exe3 Win32.PSWTroj.QQRob.lp.245760 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\8B2H1OMJTVT.exe3 Win32.Troj.GuiseIeT.xl.61440 隔离成功
病毒 2008-09-24  20:21:32 C:\Documents and Settings\Administrator\桌面\eeee\eee\360.exe3 Win32.Hack.HuigeziT.cz 隔离成功
病毒 2008-09-24  20:21:31 C:\Documents and Settings\Administrator\桌面\eeee\eee\360.DLL3 Win32.Hack.Huigezi.751616 隔离成功

显示全部楼层 · 发表于 2008-9-24 20:32:02

Begin scan in 'C:\Documents and Settings\Administrator\桌面\eeee'
C:\Documents and Settings\Administrator\桌面\eeee\eee\360.DLL3
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
[NOTE]    A backup was created as '490a3363.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\360.exe3
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    A backup was created as '4875c1f4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\8B2H1OMJTVT.exe3
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '490c336f.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\eee.exe3
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '493f3392.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\FPU3XK.exe3
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '492f337d.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\hyjkibxk.dll
[DETECTION] Is the TR/Vundo.JW Trojan
[NOTE]    A backup was created as '494433a6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\JKOXVVV926.ex3e
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '49293378.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\liba.exe3
[DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
[NOTE]    A backup was created as '493c3396.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\NewestPicture0012.JPEG-www.imageshack.com3
[DETECTION] Contains recognition pattern of the WORM/Autorun.nmt worm
[NOTE]    A backup was created as '49513392.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\Nokia GSM Navigator.exe3
[DETECTION] Is the TR/VB.fja Trojan
[NOTE]    A backup was created as '4945339c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\not.exe3
   [DETECTION] Is the TR/Dldr.Agent.dfq Trojan
[NOTE]    A backup was created as '494e339c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\OS2IOTC6EP.exe3
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '490c3380.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\pnpmem.sys3
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    A backup was created as '494a339b.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\REPACF5.exe3
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '492a3372.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\weiai.exe3
[DETECTION] Is the TR/Drop.Cattivo.A Trojan
[NOTE]    A backup was created as '49433392.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\WEQL7FYP7F7L.exe3
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '492b3372.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\ybmsp.sys3
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    A backup was created as '4947338f.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\YD8GYT86CMC.exe3
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '49123371.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\Z1KC9KX9.ex3e
[DETECTION] Is the TR/Drop.Clicker.C Trojan
[NOTE]    A backup was created as '4925335e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\zhc3F.tmp3
[DETECTION] Contains recognition pattern of the W32/Parite.tmp Windows virus
[NOTE]    A backup was created as '493d3395.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\传奇外传org.exe
[DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
[NOTE]    A backup was created as 'a1f08c75.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\传奇外传org.exe3
[DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
[NOTE]    A backup was created as 'a08f7ee6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\新建文件夹.exe3
[DETECTION] Is the TR/Agent.1236083 Trojan
[NOTE]    A backup was created as 'ae619228.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\eeee\eee\病毒程序.exe3
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    A backup was created as 'c2e59f00.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年9月24日  20:31
Used time: 00:04 Minute(s)

The scan has been done completely.

   2 Scanning directories
   31 Files were scanned
   24 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   24 files were deleted
   0 files were repaired
   24 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   0 Archives were scanned
   0 Warnings
   24 Notes

显示全部楼层 · 发表于 2008-9-24 20:51:09

TO KL FTP

显示全部楼层 · 发表于 2008-9-24 21:14:06

使用 G DATA AntiVirus 进行病毒检测
版本 19.0.8234.790
病毒特征库日期 24.09.2008
开始时间: 24.09.2008 21:12
引擎: 引擎 A - BitDefender (AVA 19.507), 引擎 B - Avast! (AVB 19.37)
高启发: 开启
文件: 开启
系统区域: 关闭
RootKits 检测: 开启

检测选中目录和文件:
S:\eee\

项目: 360.DLL3
路径: S:\eee
状态: 移至隔离区
病毒: MemScan:Backdoor.Hupigon.AAEX (引擎 A)
项目: 8B2H1OMJTVT.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: 360.exe3
路径: S:\eee
状态: 移至隔离区
病毒: GenPack:Backdoor.GrayBird.KJ (引擎 A)
项目: eee.exe3
路径: S:\eee
状态: 移至隔离区
病毒: BehavesLike:Win32.ExplorerHijack (引擎 A)
项目: FPU3XK.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: JKOXVVV926.ex3e
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: liba.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Trojan-gen {Other} (引擎 B)
项目: NewestPicture0012.JPEG-www.imageshack.com3
路径: S:\eee
状态: 移至隔离区
病毒: Trojan.Agent.AJYF (引擎 A)
项目: Nokia GSM Navigator.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Trojan-gen {Other} (引擎 B)
项目: not.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Dropped:Generic.Malware.dld!!.D1116676 (引擎 A)
项目: OS2IOTC6EP.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: pnpmem.sys3
路径: S:\eee
状态: 移至隔离区
病毒: Rootkit.Cinmus.D (引擎 A)
项目: REPACF5.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: rere.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Trojan.Generic.720959 (引擎 A)
项目: vrwbjtie.dll
路径: S:\eee
状态: 移至隔离区
病毒: Trojan.Vundo.FNT (引擎 A)
项目: weiai.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Trojan.Crypt.Delf.C (引擎 A)
项目: WEQL7FYP7F7L.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: YD8GYT86CMC.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: Z1KC9KX9.ex3e
路径: S:\eee
状态: 移至隔离区
病毒: Win32:Dropper-BEG [Trj] (引擎 B)
项目: zhc3F.tmp3
路径: S:\eee
状态: 移至隔离区
病毒: Win32.Parite.A@mm (引擎 A)
项目: (Instyler o)=>(Instyler Module 5)
检查档案: S:\eee\abosetup.exe3
状态: 发现病毒
病毒: Trojan.Generic.620470 (引擎 A)
项目: abosetup.exe3
路径: S:\eee
状态: 移至隔离区
病毒: Trojan.Generic.620470 (引擎 A)
项目: (Embedded EXE 2o)
检查档案: S:\eee\传奇外传org.exe
状态: 发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (引擎 A)
项目: 传奇外传org.exe
路径: S:\eee
状态: 移至隔离区
病毒: BehavesLike:Win32.ExplorerHijack (引擎 A)
项目: 新建文件夹.exe3
路径: S:\eee
状态: 移至隔离区
病毒: DeepScan:Generic.Malware.SFMb.ADF0593B (引擎 A)
项目: (Embedded EXE 2o)
检查档案: S:\eee\传奇外传org.exe3
状态: 发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (引擎 A)
项目: 传奇外传org.exe3
路径: S:\eee
状态: 移至隔离区
病毒: BehavesLike:Win32.ExplorerHijack (引擎 A)

检测执行时间: 24.09.2008 21:13
已检测 31 个文件
已发现 24 个病毒文件
已发现 0 个可疑文件

显示全部楼层 · 发表于 2008-9-24 22:57:24

文件体积大。数量不大！

显示全部楼层 · 发表于 2008-9-24 23:07:42

全面回報紅傘

[病毒样本] 31个,大包!!

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

16

本帖子中包含更多资源