我也来一包毒物

显示全部楼层 · 发表于 2008-10-9 20:50:01

大家测测看说一下结果

显示全部楼层 · 发表于 2008-10-9 20:57:14

2008/10/9 20:55:37 已删除病毒 Worm.Win32.AutoRun.qji G:\Temp\Virus\WINDOWS\WINDOWS\llwzjy081008.exe
2008/10/9 20:55:37 已删除病毒 Worm.Win32.AutoRun.qji G:\Temp\Virus\WINDOWS\WINDOWS\llwzjy081008.exe//PE_Patch//UPack
2008/10/9 20:55:37 已删除木马程序 Trojan.Win32.Shutdowner.awy G:\Temp\Virus\WINDOWS\WINDOWS\kunet.exe
2008/10/9 20:55:37 已删除木马程序 Trojan.Win32.Agent.afri G:\Temp\Virus\WINDOWS\WINDOWS\mh.exe
2008/10/9 20:55:37 已删除木马程序 Trojan.Win32.Agent.afri G:\Temp\Virus\WINDOWS\WINDOWS\mh.exe//PE_Patch//UPack
2008/10/9 20:55:38 已删除木马程序 Trojan-GameThief.Win32.WOW.cdw G:\Temp\Virus\WINDOWS\WINDOWS\shishi.exe
2008/10/9 20:55:38 已删除木马程序 Trojan-GameThief.Win32.WOW.cdw G:\Temp\Virus\WINDOWS\WINDOWS\shishi.exe//PE_Patch.UPX//UPX
2008/10/9 20:55:38 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\WINDOWS\WINDOWS\tl.exe
2008/10/9 20:55:38 已删除木马程序 Trojan.Win32.VB.fpt G:\Temp\Virus\WINDOWS\WINDOWS\x1.exe
2008/10/9 20:55:38 已删除广告软件 not-a-virus:AdWare.Win32.Cinmus.sqo G:\Temp\Virus\WINDOWS\WINDOWS\msn080.exe
2008/10/9 20:55:38 已删除广告软件 not-a-virus:AdWare.Win32.Cinmus.sqo G:\Temp\Virus\WINDOWS\WINDOWS\msn080.exe//stream//data0002//stream//data0002

其余 To KL

显示全部楼层 · 发表于 2008-10-9 21:00:49

下来看看

显示全部楼层 · 发表于 2008-10-9 21:04:45

2008-10-9 JAY20:55:57 Untreated Trojan program Trojan.Win32.VB.fpt High Exact C:\Documents and Settings\Owner\桌面\WINDOWS\x1.exe Postponed
2008-10-9 JAY20:55:57 Untreated Trojan program Heur.Trojan.Generic High Probably C:\Documents and Settings\Owner\桌面\WINDOWS\tl.exe Postponed
2008-10-9 JAY20:55:57 Untreated Trojan program Trojan-GameThief.Win32.WOW.cdw High Exact C:\Documents and Settings\Owner\桌面\WINDOWS\shishi.exe/PE_Patch.UPX/UPX Postponed
2008-10-9 JAY20:55:57 Untreated Adware not-a-virus:AdWare.Win32.Cinmus.sqo Medium Exact C:\Documents and Settings\Owner\桌面\WINDOWS\msn080.exe/stream/data0002/stream/data0002 Postponed
2008-10-9 JAY20:55:56 Untreated Trojan program Trojan.Win32.Agent.afri High Exact C:\Documents and Settings\Owner\桌面\WINDOWS\mh.exe/PE_Patch/UPack Postponed
2008-10-9 JAY20:55:56 Untreated Virus Worm.Win32.AutoRun.qji High Exact C:\Documents and Settings\Owner\桌面\WINDOWS\llwzjy081008.exe/PE_Patch/UPack Postponed
2008-10-9 JAY20:55:56 Untreated Trojan program Trojan.Win32.Shutdowner.awy High Exact C:\Documents and Settings\Owner\桌面\WINDOWS\kunet.exe Postponed

6个尸体，上报四个

显示全部楼层 · 发表于 2008-10-9 21:08:09

F:\WINDOWS\kunet.exe > NSIS > 31.exe - 压缩文件已损坏
F:\WINDOWS\msn080.exe > NSIS > 2.exe - 读取压缩文件时出错
F:\WINDOWS\rx.exe > UPX v12_m2 - 解压错误
F:\WINDOWS\tl.exe > UPX v12_m2 - 解压错误
F:\WINDOWS\wm.exe > UPX v12_m2 - 解压错误
F:\WINDOWS\shishi.exe - Win32/PSW.WOW.CDW 特洛伊木马
已扫描的对象数: 20
发现的威胁数: 1

显示全部楼层 · 发表于 2008-10-9 21:13:48

NIS2009 14个

显示全部楼层 · 发表于 2008-10-9 21:13:51

McAfee 报了3个。。

jxsj.exe                               no
kunet.exe                         no
llwzjy081008.exe                no
mh.exe                               no
msn080.exe                      no
rx.exe                               no
sachwqqp.exe                   new malware.n
shishi.exe                         pws-onlinegames.cd
shostt.exe                         no
sychwqot.exe                      no
tl.exe                                  no
wd.exe                               no
wm.exe                               no
x1.exe                               no
xcqwz.exe                         no
xm.exe                               generic.dx

显示全部楼层 · 发表于 2008-10-9 21:59:30

一大堆损坏的文件。。。。。。。

显示全部楼层 · 发表于 2008-10-9 22:31:42

为了扫描这包东西，我的卡巴卡了很久才扫完的

2008-10-9 22:23:40 启动任务
2008-10-9 22:23:41 检测到威胁: Trojan.Win32.Shutdowner.awy D:\My Documents\桌面\WINDOWS.rar/WINDOWS\kunet.exe
2008-10-9 22:23:41 未处理: Trojan.Win32.Shutdowner.awy D:\My Documents\桌面\WINDOWS.rar/WINDOWS\kunet.exe 延期
2008-10-9 22:23:41 检测到威胁: Worm.Win32.AutoRun.qji D:\My Documents\桌面\WINDOWS.rar/WINDOWS\llwzjy081008.exe/PE_Patch/UPack
2008-10-9 22:23:41 未处理: Worm.Win32.AutoRun.qji D:\My Documents\桌面\WINDOWS.rar/WINDOWS\llwzjy081008.exe/PE_Patch/UPack 延期
2008-10-9 22:23:41 检测到威胁: Trojan.Win32.Agent.afri D:\My Documents\桌面\WINDOWS.rar/WINDOWS\mh.exe/PE_Patch/UPack
2008-10-9 22:23:41 未处理: Trojan.Win32.Agent.afri D:\My Documents\桌面\WINDOWS.rar/WINDOWS\mh.exe/PE_Patch/UPack 延期
2008-10-9 22:23:42 检测到威胁: Trojan-GameThief.Win32.WOW.cdw D:\My Documents\桌面\WINDOWS.rar/WINDOWS\shishi.exe/PE_Patch.UPX/UPX
2008-10-9 22:23:42 未处理: Trojan-GameThief.Win32.WOW.cdw D:\My Documents\桌面\WINDOWS.rar/WINDOWS\shishi.exe/PE_Patch.UPX/UPX 延期
2008-10-9 22:29:16 检测到威胁: Heur.Trojan.Generic D:\My Documents\桌面\WINDOWS.rar/WINDOWS\tl.exe
2008-10-9 22:29:16 未处理: Heur.Trojan.Generic D:\My Documents\桌面\WINDOWS.rar/WINDOWS\tl.exe 延期
2008-10-9 22:29:17 检测到威胁: Trojan.Win32.VB.fpt D:\My Documents\桌面\WINDOWS.rar/WINDOWS\x1.exe
2008-10-9 22:29:17 未处理: Trojan.Win32.VB.fpt D:\My Documents\桌面\WINDOWS.rar/WINDOWS\x1.exe 延期
2008-10-9 22:29:22 检测到威胁: Trojan.Win32.VB.fpt D:\My Documents\桌面\WINDOWS.rar/WINDOWS\xm.exe/FSG/#
2008-10-9 22:29:22 未处理: Trojan.Win32.VB.fpt D:\My Documents\桌面\WINDOWS.rar/WINDOWS\xm.exe/FSG/# 延期

显示全部楼层 · 发表于 2008-10-9 23:25:41

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... df&t=1223565872
Information: Contains HEUR/Crypted suspicious code

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.35, VDF 7.0.6.243

[病毒样本] 我也来一包毒物

本帖子中包含更多资源

kis2009