１１

显示全部楼层 · 发表于 2008-12-31 16:19:18

a385bba740c76794546497beffcedfcd  1.js_
347899aa38e84b36178a4ec080928e43  aiiload.exe2
0517254b2e0242153a61c8a84e2f9e89  bitrxbli.exe4
ab3979b316b8b5a96f6d9f4185c55167  bttray.exe3
6e496d16895f743c0ad28f08c8db9557  COMCTL32.DLL2
83743d546c0c1efc372bd1b8872472c2  dzh_2008v5.exe2
dc5eb0c271b28f1e8e6d5b42c4700735  midimap.dll2
670acf5473c1b5ccae27e8cfa9c64cc4  run.reg2
8a7de505e444ce49ee356689e94286a0  RunOnce.reg2
fb8f25ce40192b3dc326e4b0f92970ca  winhlp32.exe2
28f81112233f7c34bdd56a2c56d373e7  wxddn.exe2

上报８个到卡巴

[ 本帖最后由 sam.to 于 2008-12-31 16:20 编辑 ]

显示全部楼层 · 发表于 2008-12-31 16:23:04

C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\aiiload.exe2 - Win32/VB.NTI 特洛伊木马
C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\bttray.exe3 - 未查明的 NewHeur_PE 病毒
C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\dzh_2008v5.exe2 > NSIS > qq03.exe - Win32/Hupigon.NFO 特洛伊木马
C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\dzh_2008v5.exe2 > NSIS > 10101.exe - 可能是 Win32/Genetik 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\dzh_2008v5.exe2 > NSIS > TBSetup(-33554357).exe > NSIS > ToolBand.dll - Win32/Adware.Zhongsou 应用程序
C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\dzh_2008v5.exe2 > NSIS > TBSetup(-33554357).exe > NSIS > Toolbar_bho.dll - Win32/Adware.Zhongsou 应用程序
C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\dzh_2008v5.exe2 > NSIS > setup_1027272.exe - Win32/Agent.OCX 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\011.rar > RAR > bttray\dzh_2008v5.exe2 > NSIS > 4005.exe - Win32/Delf.NHZ 特洛伊木马的变种

显示全部楼层 · 发表于 2008-12-31 16:30:50

a-squared Anti-Malware - 版本 4.0
上次更新: 2008-12-31 5:14:23

扫描设置:

对象: C:\Documents and Settings\Administrator\桌面\011.rar
扫描文件: 开
启发式扫描: 开
ADS 扫描: 开

扫描开始于: 2008-12-31 16:30:04

C:\Documents and Settings\Administrator\桌面\011.rar/bitrxbli.exe4 已检测: Trojan.Win32.Agent!IK

已扫描

文件: 8
跟踪记录: 0
Cookies: 0
进程: 0

已发现

文件: 1
跟踪记录: 0
Cookies: 0
进程: 0
注册表键: 0

扫描结束于: 2008-12-31 16:30:05
扫描用时: 0:00:01

显示全部楼层 · 发表于 2008-12-31 16:31:35

File ID    Filename    Size (Byte) Result
25221638    wxddn.exe2    104 KB    UNDER ANALYSIS
25221639    1.js_    2.61 KB    UNDER ANALYSIS
25221640    bitrxbli.exe4    57.5 KB    UNDER ANALYSIS
25221647    bttray.exe3  24 KB       UNDER ANALYSIS
25221641    COMCTL32.DLL2    469.5 KB    UNDER ANALYSIS
25221642    run.reg2    2.28 KB    UNDER ANALYSIS
25221643    RunOnce.reg2    396 Byte    UNDER ANALYSIS
514537    midimap.dll2    18.5 KB    KNOWN CLEAN
515524    winhlp32.exe2    265 KB    KNOWN CLEAN

显示全部楼层 · 发表于 2008-12-31 16:43:44

C:\Documents and Settings\Administrator\桌面\011.rar>>bttray\aiiload.exe2>>emb-1.exe TrojanDownloader.VB.zci.lbsp 木马还未处理
C:\Documents and Settings\Administrator\桌面\011.rar>>bttray\bitrxbli.exe4 Trojan.Agent.awqn.axbn 木马还未处理

显示全部楼层 · 发表于 2008-12-31 19:14:28

查处一个？

显示全部楼层 · 发表于 2008-12-31 19:35:28

红伞2个

avg剩下7个

[病毒样本] １１

本帖子中包含更多资源

诺顿09

本帖子中包含更多资源