[病毒样本] 3ge

显示全部楼层 · 发表于 2008-10-9 13:14:18

Begin scan in 'D:\vb.rar'
D:\vb.rar
[0] Archive type: RAR
   --> diusf.css
      [DETECTION] Is the TR/Downloader.Gen Trojan
   --> iskfo.css
      [DETECTION] Is the TR/Downloader.Gen Trojan
--> sp2.exe
   [DETECTION] Is the TR/Vundo.Gen Trojan
[NOTE]    A backup was created as '491b9372.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-10-9 13:22:09

D:\virus\vb.rar:\diusf.css - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\virus\vb.rar:\iskfo.css - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\virus\vb.rar:\sp2.exe - Signature 'Trojan.Win32.Monder' found
D:\virus\vb.rar

4 Files scanned
(1 Archiv with 3 files)
3 Signatures found
0 Suspect code-parts found
Used time: 0:00.015

显示全部楼层 · 发表于 2008-10-9 13:26:43

2008-10-9 13:23:10 Deleted: not-a-virus:AdWare.Win32.Virtumonde.nol C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\attachment.php/sp2.exe
2008-10-9 13:23:10 Detected: not-a-virus:AdWare.Win32.Virtumonde.nol C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\attachment.php/sp2.exe
2008-10-9 13:23:10 Deleted: Trojan-Downloader.Win32.Small.abst C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\attachment.php/iskfo.css
2008-10-9 13:23:10 Detected: Trojan-Downloader.Win32.Small.abst C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\attachment.php/iskfo.css/PE_Patch/UPack
2008-10-9 13:23:10 Deleted: Trojan-Downloader.Win32.Small.abst C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\attachment.php/diusf.css
2008-10-9 13:23:10 Detected: Trojan-Downloader.Win32.Small.abst C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\attachment.php/diusf.css/PE_Patch/UPack
y

显示全部楼层 · 发表于 2008-10-9 13:31:47

sep 3

显示全部楼层 · 发表于 2008-10-9 15:33:13

微点拦截

显示全部楼层 · 发表于 2008-10-9 15:59:05

F:\vb.rar > RAR > diusf.css - Win32/TrojanDownloader.Small.ABST 特洛伊木马
F:\vb.rar > RAR > iskfo.css - Win32/TrojanDownloader.Small.ABST 特洛伊木马
F:\vb.rar > RAR > sp2.exe - Win32/Adware.Virtumonde 应用程序

显示全部楼层 · 发表于 2008-10-9 16:02:42

扫描系统区域...
扫描所选择的目录和文件...
对象: iskfo.css
路径: F:
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Small.abst (KAV 引擎), Generic.Malware.dld!!.4E788BE8 (BD 引擎)
对象: sp2.exe
路径: F:
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Virtumonde.nol (KAV 引擎), Trojan.Vundo.EHF (BD 引擎)
对象: diusf.css
路径: F:
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Small.abst (KAV 引擎), Generic.Malware.dld!!.4E788BE8 (BD 引擎)
扫描完成: 2008-10-9 16:02
已检查 3 个文件
已发现 3 个染毒文件

显示全部楼层 · 发表于 2008-10-9 17:58:29

显示全部楼层 · 发表于 2008-10-9 20:20:45

McAfee 全灭。。

[病毒样本] 3ge

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源