转自的病毒样本 [求助] 【GYM】 各位大大幫忙！中毒啦！

328397663

2009-2-6 1:28:12 已删除 木马程序 Trojan-Downloader.Win32.Small.jeq C:\Documents and Settings\Administrator\桌面\16\19.exe  
2009-2-6 1:28:13 已删除 木马程序 Backdoor.Win32.PcClient.acgb C:\Documents and Settings\Administrator\桌面\16\01.exe  
2009-2-6 1:28:22 已删除 木马程序 Trojan.Win32.Agent.bonn C:\Documents and Settings\Administrator\桌面\16\setup1514.exe  
2009-2-6 1:28:14 已删除 病毒 Rootkit.Win32.Agent.gwx C:\Documents and Settings\Administrator\桌面\16\1027231.exe  
2009-2-6 1:28:17 已删除 病毒 Worm.Win32.Fujack.cr C:\Documents and Settings\Administrator\桌面\16\app.exe  
2009-2-6 1:28:22 已删除 广告软件 not-a-virus:AdWare.Win32.AdMedia.ed C:\Documents and Settings\Administrator\桌面\16\msn193.exe

kingmuro

江民杀3个,PCTOOLS没有发现

tracydk

现在不管啥都往symantec那里仍

tracydk

Your Submission Has Been Sent
Your submission has been sent Thu Feb 5 16:47:45 PST 2009. You will receive an email message from Symantec with a tracking number that will enable you to check the status of this submission.

dokhell

avast！拦截

ledled

Name: Adware.Cinmus.Gen.14
Type: Virus

Description:


Files:
c:\users\administrator\desktop\病毒样本\测试\16\msn193.exe
其它上报VB~

woai_jolin

http://bbs.kafan.cn/attachment.p ... 02&t=1233882989        multiple threats        deleted (after the next restart) - quarantined       
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/01.exe        Win32/PcClient.NCS trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/1027231.exe        a variant of Win32/Agent.OCX trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/19.exe        Win32/Delf.NYW trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/app.exe        a variant of Win32/Kryptik.AF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe        probably a variant of Win32/Adware.Cinmus application        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » Entries.bin        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » Strings.txt        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » System.dll        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » 117.exe        probably a variant of Win32/Adware.Cinmus application               
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » 117.exe » NSIS » Entries.bin        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » 117.exe » NSIS » Strings.txt        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » 117.exe » NSIS » System.dll        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1233882989 » ZIP » 16/msn193.exe » NSIS » 117.exe » NSIS » 龏

电影结束了

19.exe to AVG

huimiewlss