AUTOrun大礼包

显示全部楼层 · 发表于 2008-12-3 00:50:25

AUTOrun大礼包

显示全部楼层 · 发表于 2008-12-3 01:08:46

显示全部楼层 · 发表于 2008-12-3 01:17:10

2008/12/3 1:15:49 已清除木马程序 Trojan-PSW.Win32.QQPass.ati G:\Temp\Virus\dudu.rar/dudu\AutoRun.exe//UPX
2008/12/3 1:15:49 已清除木马程序 Trojan.VBS.Zapchast.b G:\Temp\Virus\dudu.rar/dudu\folder.htt
2008/12/3 1:15:49 已清除木马程序 Trojan.VBS.Zapchast.b G:\Temp\Virus\dudu.rar/dudu\NetHood.htm
2008/12/3 1:15:49 已清除木马程序 Trojan-Downloader.Win32.Agent.hba G:\Temp\Virus\dudu.rar/dudu\pagefile.pif//UPack
2008/12/3 1:15:49 已清除木马程序 Trojan-Spy.Win32.Pophot.apw G:\Temp\Virus\dudu.rar/dudu\auto.exe//PE_Patch//UPack
2008/12/3 1:15:49 已清除木马程序 Trojan-Spy.Win32.Pophot.apw G:\Temp\Virus\dudu.rar
2008/12/3 1:15:49 已清除病毒 Worm.Win32.AutoRun.dzn G:\Temp\Virus\dudu.rar/dudu\autorun.inf
2008/12/3 1:15:49 已清除病毒 Email-Worm.Win32.Rays G:\Temp\Virus\dudu.rar/dudu\Ghost.bat
2008/12/3 1:15:49 已清除病毒 Worm.Win32.Anilogo.f G:\Temp\Virus\dudu.rar/dudu\ntldr.exe//UPack
2008/12/3 1:15:49 已清除病毒 Worm.Win32.AutoRun.bkv G:\Temp\Virus\dudu.rar/dudu\soS.Exe
2008/12/3 1:15:49 已清除病毒 Email-Worm.Win32.Rays G:\Temp\Virus\dudu.rar/dudu\WINDOWS.EXE

显示全部楼层 · 发表于 2008-12-3 01:17:34

ESET 全K，剩一个空的desktop.ini
C:\Documents and Settings\GUNDAM\桌面\dudu\auto.exe - a variant of Win32/Spy.Pophot trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\AutoRun.exe - a variant of Win32/PSW.QQPass.NCZ trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\autorun.inf - INF/Autorun virus - action selection postponed until scan completion
C:\Documents and Settings\GUNDAM\桌面\dudu\folder.htt - VBS/Zapchast.B trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\Ghost.bat - Win32/VB.NBB worm - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\NetHood.htm - VBS/Zapchast.B trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\ntldr.exe - Win32/Anilogo.F worm - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\pagefile.pif - probably a variant of Win32/PSW.OnLineGames.NMO trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\soS.Exe - a variant of Win32/AutoRun.K worm - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\WINDOWS.EXE - Win32/VB.NBB worm - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\dudu\autorun.inf - INF/Autorun virus - deleted - quarantined

2楼的XD，你这样看不出来报几个呀

显示全部楼层 · 发表于 2008-12-3 01:53:09

Start of the scan: 2008年12月3日  01:40
Starting the file scan:
Begin scan in 'C:\Documents and Settings\***\桌面\文件夹\dudu.rar'
C:\Documents and Settings\***\桌面\文件夹\dudu.rar
C:\Documents and Settings\***\桌面\文件夹\dudu.rar
[0] Archive type: RAR
--> dudu\autorun.inf
   [DETECTION] Contains recognition pattern of the INF/AutoRun.GN INF virus
--> dudu\folder.htt
   [DETECTION] Contains recognition pattern of the VBS/Zapchast.B VBS script virus
--> dudu\Ghost.bat
   [DETECTION] Contains recognition pattern of the WORM/Traxgy.B worm
--> dudu\NetHood.htm
   [DETECTION] Contains recognition pattern of the VBS/Zapchast.B VBS script virus
   --> dudu\ntldr.exe
      [DETECTION] Contains recognition pattern of the W32/Autorun.BK Windows virus
   --> dudu\pagefile.pif
      [DETECTION] Is the TR/Downloader.Gen Trojan
--> dudu\soS.Exe
   [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
--> dudu\WINDOWS.EXE
   [DETECTION] Contains recognition pattern of the WORM/Traxgy.B worm
--> dudu\auto.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4999738d.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
---------------------------------------------------------------------------------------------------------
红伞P(库7.01.00.174)杀。

显示全部楼层 · 发表于 2008-12-3 06:57:50

nis 2009 留 autorun 和 desktop

显示全部楼层 · 发表于 2008-12-3 08:38:32

显示全部楼层 · 发表于 2008-12-3 09:04:17

2008-12-3 9:00,高,自动防护已检测到 W32.Traxg@mm,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\windows.exe,,,,
2008-12-3 9:00,高,自动防护已检测到 W32.Hitapop,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\auto.exe,,,,
2008-12-3 9:00,高,自动防护已检测到 W32.Mumawow.F,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\ntldr.exe,,,,
2008-12-3 9:00,高,自动防护已检测到 W32.Gammima,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\autorun.exe,,,,
2008-12-3 9:00,高,自动防护已检测到 W32.Traxg@mm,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\ghost.bat,,,,
2008-12-3 9:00,高,自动防护已检测到 W32.Pifio,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\pagefile.pif,,,,
2008-12-3 9:00,高,自动防护已检测到 JS.Exception.Exploit,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\folder.htt,,,,
2008-12-3 9:00,高,自动防护已检测到 W32.Gexin.A,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\sos.exe,,,,
2008-12-3 9:00,高,自动防护已检测到 JS.Exception.Exploit,"已禁止, 已禁止",已解决 - 不采取操作,病毒,2008.12.02.022,自动防护,c:\documents and settings\administrator\桌面\dudu\dudu\nethood.htm,,,,

显示全部楼层 · 发表于 2008-12-3 09:41:06

给VISTA的防火墙给拦下来了

显示全部楼层 · 发表于 2008-12-3 10:12:00

试一把

[病毒样本] AUTOrun大礼包

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源