今天找到的

显示全部楼层 · 发表于 2008-9-29 10:23:54

今天找到的

显示全部楼层 · 发表于 2008-9-29 10:26:59

ESS kill 9
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\nsw5D.tmp.exe - a variant of Win32/Adware.Cinmus application
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\LSWR.exe - probably a variant of Win32/TrojanDownloader.VB.NPP trojan
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\90.exe - Win32/Agent.NVU trojan
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\nsqC.tmp.exe - a variant of Win32/Adware.Cinmus application
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\SMSS.EXE - probably a variant of Win32/TrojanDownloader.VB.NPP trojan
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\smct.exe - Win32/TrojanDownloader.VB.NPO trojan
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\svchost2.exe - Win32/StartPage.NIH trojan
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\wuauclt.exe - probably a variant of Win32/TrojanDownloader.Agent.ZZF trojan
C:\Documents and Settings\Administrator\桌面\bingdu.rar » RAR » bingdu\腾讯安全程序.exe - a variant of Win32/TrojanDownloader.VB.NPP trojan

显示全部楼层 · 发表于 2008-9-29 10:38:17

IK 13
29:09:2008 10:37:04 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Downloads\bingdu
File scanned: C:\Downloads\bingdu\bingdu\90.exe - SIGNATURE FOUND "Trojan.Genlot.CXP"
File scanned: C:\Downloads\bingdu\bingdu\Fxlck.exe - SIGNATURE FOUND "not-a-virus:RiskTool.Win32.HideProc.c"
File scanned: C:\Downloads\bingdu\bingdu\LCSMSSl.exe - SIGNATURE FOUND "not-a-virus:RiskTool.Win32.HideProc.c"
File scanned: C:\Downloads\bingdu\bingdu\LSWR.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.VB.hoz"
File scanned: C:\Downloads\bingdu\bingdu\nsqC.tmp.exe - SIGNATURE FOUND "Trojan.Win32.Cinmus.K"
File scanned: C:\Downloads\bingdu\bingdu\nsw5D.tmp.exe - SIGNATURE FOUND "Trojan.Win32.Cinmus.K"
File scanned: C:\Downloads\bingdu\bingdu\QM.exe - SIGNATURE FOUND "not-a-virus:RiskTool.Win32.HideProc.c"
File scanned: C:\Downloads\bingdu\bingdu\smct.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.VB.fyq"
File scanned: C:\Downloads\bingdu\bingdu\SMSS.EXE - SIGNATURE FOUND "Win32.SuspectCrc"
File scanned: C:\Downloads\bingdu\bingdu\svchost2.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Adload.aml"
File scanned: C:\Downloads\bingdu\bingdu\wyxp.exe - SIGNATURE FOUND "not-a-virus:RiskTool.Win32.HideProc.c"
File scanned: C:\Downloads\bingdu\bingdu\yxowr.exe - SIGNATURE FOUND "not-a-virus:RiskTool.Win32.HideProc.c"
File scanned: C:\Downloads\bingdu\bingdu\腾讯安全程序.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.VB.hhi"
29:09:2008 10:37:04 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 2
Files scanned: 21
Virus found: 13
----------------------------------------------------

显示全部楼层 · 发表于 2008-9-29 11:26:56

大蜘蛛10个，禁止下载

显示全部楼层 · 发表于 2008-9-29 13:07:18

病毒 2008-09-29  13:07:03 C:\Documents and Settings\Administrator\桌面\bingdu.rar\bingdu\yxowr.exe Win32.Troj.Agent.yq.57856 清除成功
病毒 2008-09-29  13:07:03 C:\Documents and Settings\Administrator\桌面\bingdu.rar\bingdu\svchost2.exe Win32.TrojDownloader.Adload.ba.12288 清除成功
病毒 2008-09-29  13:07:03 C:\Documents and Settings\Administrator\桌面\bingdu.rar\bingdu\smct.exe Win32.TrojDownloader.VB.73728 清除成功
病毒 2008-09-29  13:07:03 C:\Documents and Settings\Administrator\桌面\bingdu.rar\bingdu\SMSS.EXE Win32.TrojDownloader.VB.69632 清除成功
病毒 2008-09-29  13:07:03 C:\Documents and Settings\Administrator\桌面\bingdu.rar\bingdu\nsqC.tmp.exe Win32.Troj.BhoT.ww.20480 清除成功
病毒 2008-09-29  13:07:02 C:\Documents and Settings\Administrator\桌面\bingdu.rar\bingdu\90.exe Win32.PSWTroj.OnLineGames.176128 清除成功
病毒 2008-09-29  13:07:02 C:\Documents and Settings\Administrator\桌面\bingdu.rar\bingdu\nsw5D.tmp.exe Win32.Troj.BhoT.ww.20480 清除成功

显示全部楼层 · 发表于 2008-9-29 13:08:12

无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
367029&k=41eff87d70f0c77813916bbc4ae7d40
b&t=1222664844

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan-Downloader.Win32.VB.hhi

如有疑问，请联系您的技术支持
创建日期：
Mon Sep 29 13:07:40 2008
Kaspersky Lab

显示全部楼层 · 发表于 2008-9-29 13:14:24

Starting the file scan:

Begin scan in 'C:\Users\Morgan\Desktop\bingdu'
C:\Users\Morgan\Desktop\bingdu\bingdu\
  90.exe
[DETECTION] Is the TR/PSW.OnlineGames.ajqd.11 Trojan
[NOTE]    The file was deleted!
  ad7731.exe
  Explorev.exe
  Fxlck.exe
[DETECTION] Is the TR/Small.BQL Trojan
[NOTE]    The file was deleted!
  IEXPLOER.EXE
  IEXPLORER.EXE
  ILM.EXE
[0] Archive type: Runtime Packed
--> Object
   [DETECTION] Is the TR/Small.BQL Trojan
[NOTE]    The file was deleted!
  LCSMSSl.exe
[DETECTION] Is the TR/Small.BQL Trojan
[NOTE]    The file was deleted!
  LSWR.exe
[0] Archive type: Runtime Packed
--> Object
[NOTE]    The file was deleted!
  mic9.tmp.exe
[0] Archive type: RSRC
--> Object
[NOTE]    The file was deleted!
  nsqC.tmp.exe
[DETECTION] Is the TR/Agent.20480.326 Trojan
[NOTE]    The file was deleted!
  nsw5D.tmp.exe
[DETECTION] Is the TR/Agent.20480.326 Trojan
[NOTE]    The file was deleted!
  QM.exe
[DETECTION] Is the TR/Small.BQL Trojan
[NOTE]    The file was deleted!
  Qmussi.exe
  smct.exe
[DETECTION] Is the TR/Dldr.VB.fyq.1 Trojan
[NOTE]    The file was deleted!
  SMSS.EXE
[0] Archive type: Runtime Packed
--> Object
[NOTE]    The file was deleted!
  svchost2.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
  wuauclt.exe
  wyxp.exe
[DETECTION] Is the TR/Small.BQL Trojan
[NOTE]    The file was deleted!
  yxowr.exe
[DETECTION] Is the TR/Small.BQL Trojan
[NOTE]    The file was deleted!
  腾讯安全程序.exe
[0] Archive type: Runtime Packed
--> Object
[NOTE]    The file was deleted!

End of the scan: 2008年9月28日  22:14
Used time: 00:06 Minute(s)

The scan has been done completely.

   2 Scanning directories
   21 Files were scanned
   15 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   15 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   0 Archives were scanned
   0 Warnings
   15 Notes

显示全部楼层 · 发表于 2008-9-29 13:27:37

瑞星09 14个费尔14个

显示全部楼层 · 发表于 2008-9-29 16:51:10

驱逐舰报

显示全部楼层 · 发表于 2008-9-29 20:59:17

McAfee  报了14个。。

90.exe                      pws-mmorpg.gen
ad7731.exe             no
explorev.exe             no
fxlck.exe                   w32/autorun.worm.b
iexploer.exe             no
iexplorer.exe             no
ilm.exe                      w32/autorun.worm.b
lcsmssl.exe             w32/autorun.worm.b
lswr.exe                     generic downloader.x
mic9.tmp.exe          with fishy extension
nsqc.tmp.exe          with fishy extension
nsw5d.tmp.exe       with fishy extension
qm.exe                   w32/autorun.worm.b
qmussi.exe                no
smct.exe                   downloader.gen.a
smss.exe                generic.dx
svchost2.exe          downloader.gen.a
wuauclt.exe             no
wyxp.exe                   w32/autorun.worm.b
xxxxxxxxxxxx.exe       downloader.gen.a
yxowr.exe                w32/autorun.worm.b

[病毒样本] 今天找到的

本帖子中包含更多资源

7

本帖子中包含更多资源