Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

显示全部楼层 · 发表于 2009-4-5 19:11:13

Name: Packed/Upack
Type: Sequence

Description:

Files:
c:\users\administrator\desktop\4a0a452255e108fe14129cce4e5765cf.exe

Name: Packed/Upack
Type: Sequence

Description:

Files:
c:\users\administrator\desktop\4a0a452255e108fe14129cce4e5765cf.exe

Name: Packed/FSG
Type: Sequence

Description:

Files:
c:\users\administrator\desktop\4a0a452255e108fe14129cce4e5765cf.exe

显示全部楼层 · 发表于 2009-4-6 18:19:50

Update

显示全部楼层 · 发表于 2009-4-6 18:23:10

'TR/Agent.pxw [trojan]'
'ADSPY/Agent.XA [adware]'
'TR/Crypt.FKM.Gen [trojan]'

显示全部楼层 · 发表于 2009-4-6 22:17:50

Name: Packed/Upack
Type: Sequence

Description:

Files:
c:\users\administrator\desktop\f33ab6521670a2a8122e15e51a76692f.exe

Name: Packed/FSG
Type: Sequence

Description:

Files:
c:\users\administrator\desktop\f33ab6521670a2a8122e15e51a76692f.exe

显示全部楼层 · 发表于 2009-4-7 18:47:02

Update

显示全部楼层 · 发表于 2009-4-8 17:43:48

Update

显示全部楼层 · 发表于 2009-4-8 18:40:09

23 to js

显示全部楼层 · 发表于 2009-4-8 19:40:51

第22-23次更新
Starting the file scan:

Begin scan in 'D:\kafan\9FA6629C4205C93690124909F0E0428E.exe'
D:\kafan\9FA6629C4205C93690124909F0E0428E.exe
  [0] Archive type: NSIS
[DETECTION] Contains recognition pattern of the DR/Agent.ijd.34 dropper
--> [TempDir]/setup_1027272.exe
   --> Object
      [2] Archive type: OVL
      --> Object
      [DETECTION] Is the TR/Agent.pxw Trojan
--> [TempDir]/small66.exe
   --> Object
      [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
--> [TempDir]/qq2009.exe
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
--> [TempDir]/paimin6.exe
   [DETECTION] Contains recognition pattern of the DR/IETimbar dropper
   --> Software//Microsoft//Windows//CurrentVersion//Explorer//Browser Helper Objects//{489873CE-F3E1-44A3-8E89-04BE26BE4446}/IETimbar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/IETimbar adware or spyware
--> [TempDir]/svchosts.exe
   [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
--> [TempDir]/lqbz82.exe
   [DETECTION] Is the TR/Drop.Agent.PAL Trojan
[NOTE]    A backup was created as '4a1d8dcb.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\F0E960C2E7C078169D82FEF79A34B15C.exe'
D:\kafan\F0E960C2E7C078169D82FEF79A34B15C.exe
  [0] Archive type: NSIS
[DETECTION] Contains recognition pattern of the DR/Agent.ijd.35 dropper
--> [TempDir]/setup_1027272.exe
   --> Object
      [2] Archive type: OVL
      --> Object
      [DETECTION] Is the TR/Agent.pxw Trojan
--> [TempDir]/small66.exe
   --> Object
      [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
--> [TempDir]/paimin6.exe
   [DETECTION] Contains recognition pattern of the DR/IETimbar dropper
   --> Software//Microsoft//Windows//CurrentVersion//Explorer//Browser Helper Objects//{489873CE-F3E1-44A3-8E89-04BE26BE4446}/IETimbar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/IETimbar adware or spyware
--> [TempDir]/svchosts.exe
   [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
--> [TempDir]/lqbz82.exe
   [DETECTION] Is the TR/Drop.Agent.PAL Trojan
--> [TempDir]/service.exe
   [DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '4a218db7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月8日  19:41
Used time: 00:04 Minute(s)

The scan has been done completely.

   0 Scanned directories
   30 Files were scanned
   16 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   2 files were deleted
   0 Viruses and unwanted programs were repaired
   2 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   14 Files not concerned
   4 Archives were scanned
   0 Warnings
   2 Notes

显示全部楼层 · 发表于 2009-4-8 23:32:30

名称: Rootkit.Agent.IUBT
类型: Trojan

描述:

文件:
c:\users\administrator\desktop\9fa6629c4205c93690124909f0e0428e.exe

名称: Packed/FSG
类型: Sequence

描述:

文件:
c:\users\administrator\desktop\9fa6629c4205c93690124909f0e0428e.exe

显示全部楼层 · 发表于 2009-4-8 23:32:53

名称: Rootkit.Agent.IUBT
类型: Trojan

描述:

文件:
c:\users\administrator\desktop\f0e960c2e7c078169d82fef79a34b15c.exe

[病毒样本] Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

回复 66楼 935623508 的帖子

回复 72楼 935623508 的帖子

回复 72楼 935623508 的帖子

回复 75楼 935623508 的帖子

回复 76楼 935623508 的帖子