几个过江民2008.10.14病毒库的病毒

显示全部楼层 · 发表于 2008-10-14 22:45:52

几个过江民kv2008 2008.10.14 病毒库的病毒

显示全部楼层 · 发表于 2008-10-14 22:50:49

Begin scan in 'D:\绅博.rar'
D:\绅博.rar
[0] Archive type: RAR
--> shengji.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> 999.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
--> 1.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> 1_un.exe
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '492304e0.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-10-14 22:51:20

2008-10-14 JAY22:50:56 Untreated Virus Worm.Win32.AutoRun.qpm High Exact C:\Documents and Settings\Owner\桌面\绅博.rar/1_un.exe Postponed
2008-10-14 JAY22:50:56 Untreated Virus Worm.Win32.AutoRun.qpm High Exact C:\Documents and Settings\Owner\桌面\绅博.rar/1.exe/PE_Patch/UPack Postponed
2008-10-14 JAY22:50:56 Untreated Trojan program Trojan.Win32.VB.fmn High Exact C:\Documents and Settings\Owner\桌面\绅博.rar/999.exe/FSG Postponed
2008-10-14 JAY22:50:56 Untreated Virus Worm.Win32.AutoRun.qpm High Exact C:\Documents and Settings\Owner\桌面\绅博.rar/shengji.exe/PE_Patch/UPack Postponed

显示全部楼层 · 发表于 2008-10-14 22:51:30

Scan Stats:
  Scan Time: 1 seconds
  Scan Options:
  Scan Targets: D:\Virus\绅博.rar
  Counts:
Total items scanned: 6
- Files & Directories: 6
- Registry Entries: 0
- Processes & Start-up Items: 0
- Network & Browser Items: 0
- Other: 0
- Trusted Files: 0
- Skipped Files: 0

Total security risks detected: 4
Total items resolved: 4
Total items that require attention: 0

Resolved Threats:
Risks in compressed file "绅博.rar"
Type: Compressed
Risk: Medium (Medium Stealth, Medium Removal, Medium Performance, Medium Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
4 Files
d:\virus\绅博.rar - Deleted

显示全部楼层 · 发表于 2008-10-14 22:53:49

显示全部楼层 · 发表于 2008-10-14 22:54:15

病毒 2008-10-14  22:54:07 C:\Documents and Settings\Administrator\桌面\绅博.rar\1_un.exe Win32.Troj.StringT.rv.204800 清除成功
病毒 2008-10-14  22:54:07 C:\Documents and Settings\Administrator\桌面\绅博.rar\1.exe Win32.Troj.StringT.rv.204800 清除成功
病毒 2008-10-14  22:54:07 C:\Documents and Settings\Administrator\桌面\绅博.rar\999.exe Win32.Troj.VB.401408 清除成功
病毒 2008-10-14  22:54:06 C:\Documents and Settings\Administrator\桌面\绅博.rar\shengji.exe Win32.Troj.StringT.rv.204800 清除成功

显示全部楼层 · 发表于 2008-10-14 23:11:10

ESS：
E:\下载文件\绅博.rar > RAR > 1.exe - Win32/AutoRun.ADB 蠕虫
E:\下载文件\绅博.rar > RAR > 1_un.exe - Win32/AutoRun.ADB 蠕虫

显示全部楼层 · 发表于 2008-10-14 23:30:43

2008-10-14 23:29:53 检测到威胁: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/shengji.exe/PE_Patch/UPack
2008-10-14 23:29:53 未处理: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/shengji.exe/PE_Patch/UPack 延期
2008-10-14 23:29:53 检测到威胁: Trojan.Win32.VB.fmn D:\My Documents\桌面\sf.rar/999.exe/FSG
2008-10-14 23:29:53 未处理: Trojan.Win32.VB.fmn D:\My Documents\桌面\sf.rar/999.exe/FSG 延期
2008-10-14 23:29:53 检测到威胁: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/1.exe/PE_Patch/UPack
2008-10-14 23:29:53 未处理: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/1.exe/PE_Patch/UPack 延期
2008-10-14 23:29:53 检测到威胁: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/1_un.exe
2008-10-14 23:29:53 未处理: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/1_un.exe 延期
2008-10-14 23:29:54 检测到威胁: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/1.exe/PE_Patch/UPack
2008-10-14 23:29:54 检测到威胁: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/1_un.exe
2008-10-14 23:29:54 检测到威胁: Trojan.Win32.VB.fmn D:\My Documents\桌面\sf.rar/999.exe/FSG
2008-10-14 23:29:54 检测到威胁: Worm.Win32.AutoRun.qpm D:\My Documents\桌面\sf.rar/shengji.exe/PE_Patch/UPack

显示全部楼层 · 发表于 2008-10-15 09:09:46

小红伞和AVG都可以杀它

显示全部楼层 · 发表于 2008-10-15 09:16:01

扫一扫

[病毒样本] 几个过江民2008.10.14病毒库的病毒

本帖子中包含更多资源

本帖子中包含更多资源

kis2009

本帖子中包含更多资源