Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

显示全部楼层 · 发表于 2009-4-9 18:49:32

Update

显示全部楼层 · 发表于 2009-4-9 19:22:38

第24次更新
Starting the file scan:

Begin scan in 'D:\kafan\A99E97CD45C2C6246DB2BF83F4EDB86F.exe'
D:\kafan\A99E97CD45C2C6246DB2BF83F4EDB86F.exe
  [0] Archive type: NSIS
--> [TempDir]/small66.exe
   --> Object
      [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
--> [TempDir]/svchosts.exe
   [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
--> [TempDir]/lqbz82.exe
   [DETECTION] Is the TR/Drop.Agent.PAL Trojan
--> [TempDir]/service.exe
   [DETECTION] Is the TR/ATRAPS.Gen Trojan
--> [TempDir]/llly66.exe
   [1] Archive type: NSIS
   --> [UnknownDir]/install.exe
      [DETECTION] Is the TR/Agent.FWQ Trojan
   --> [UnknownDir]/nlpsa.txt
      [DETECTION] Is the TR/Downloader.Gen Trojan
   --> [UnknownDir]/setup.exe
      [DETECTION] Is the TR/Agent.fwq.1 Trojan
   --> [UnknownDir]/sysmain.dat
      [DETECTION] Is the TR/Kaba.73278 Trojan
   --> [UnknownDir]/sysvc.dat
      [DETECTION] Is the TR/Spy.Agent.abzr Trojan
--> [TempDir]/paimin6.exe
   [DETECTION] Contains recognition pattern of the DR/IETimbar dropper
   --> Software//Microsoft//Windows//CurrentVersion//Explorer//Browser Helper Objects//{489873CE-F3E1-44A3-8E89-04BE26BE4446}/IETimbar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/IETimbar adware or spyware
[NOTE]    A backup was created as '4a16dafc.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月9日  19:23
Used time: 00:01 Minute(s)

The scan has been done completely.

   0 Scanned directories
   22 Files were scanned
   11 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   1 files were deleted
   0 Viruses and unwanted programs were repaired
   1 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   11 Files not concerned
   3 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2009-4-9 23:30:20

24 to VB

显示全部楼层 · 发表于 2009-4-10 18:30:47

Update

显示全部楼层 · 发表于 2009-4-10 18:34:40

第25次更新
Starting the file scan:

Begin scan in 'D:\kafan\E17F99DE92629790847814CC5059D9C3.exe'
D:\kafan\E17F99DE92629790847814CC5059D9C3.exe
  [0] Archive type: NSIS
--> [TempDir]/small66.exe
   --> Object
      [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
--> [TempDir]/svchosts.exe
   [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
--> [TempDir]/lqbz82.exe
   [DETECTION] Is the TR/Drop.Agent.PAL Trojan
--> [TempDir]/llly66.exe
   [1] Archive type: NSIS
   --> [UnknownDir]/install.exe
      [DETECTION] Is the TR/Agent.FWQ Trojan
   --> [UnknownDir]/nlpsa.txt
      [DETECTION] Is the TR/Downloader.Gen Trojan
   --> [UnknownDir]/setup.exe
      [DETECTION] Is the TR/Agent.fwq.1 Trojan
   --> [UnknownDir]/sysmain.dat
      [DETECTION] Is the TR/Kaba.73278 Trojan
   --> [UnknownDir]/sysvc.dat
      [DETECTION] Is the TR/Spy.Agent.abzr Trojan
--> [TempDir]/paimin6.exe
   [DETECTION] Contains recognition pattern of the DR/IETimbar dropper
   --> Software//Microsoft//Windows//CurrentVersion//Explorer//Browser Helper Objects//{489873CE-F3E1-44A3-8E89-04BE26BE4446}/IETimbar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/IETimbar adware or spyware
[NOTE]    A backup was created as '4a162131.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月10日  18:35
Used time: 00:01 Minute(s)

The scan has been done completely.

   0 Scanned directories
   22 Files were scanned
   10 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   1 files were deleted
   0 Viruses and unwanted programs were repaired
   1 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   12 Files not concerned
   3 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2009-4-10 23:44:38

to VB

显示全部楼层 · 发表于 2009-4-11 11:43:17

4.10 to rav

显示全部楼层 · 发表于 2009-4-12 10:20:43

厉害

显示全部楼层 · 发表于 2009-4-12 14:52:38

Update

显示全部楼层 · 发表于 2009-4-12 15:03:31

第26次更新
Starting the file scan:

Begin scan in 'D:\kafan\7AE4E58B9681D19B2E2B4EF0E46EF9A6.exe'
D:\kafan\7AE4E58B9681D19B2E2B4EF0E46EF9A6.exe
  [0] Archive type: NSIS
--> [TempDir]/small66.exe
   --> Object
      [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
--> [TempDir]/svchosts.exe
   [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
--> [TempDir]/lqbz82.exe
   [DETECTION] Is the TR/Drop.Agent.PAL Trojan
--> [TempDir]/llly66.exe
   [1] Archive type: NSIS
   --> [UnknownDir]/install.exe
      [DETECTION] Is the TR/Agent.FWQ Trojan
   --> [UnknownDir]/nlpsa.txt
      [DETECTION] Is the TR/Downloader.Gen Trojan
   --> [UnknownDir]/setup.exe
      [DETECTION] Is the TR/Agent.fwq.1 Trojan
   --> [UnknownDir]/sysmain.dat
      [DETECTION] Is the TR/Kaba.73278 Trojan
   --> [UnknownDir]/sysvc.dat
      [DETECTION] Is the TR/Spy.Agent.abzr Trojan
--> [TempDir]/paimin6.exe
   [DETECTION] Contains recognition pattern of the DR/IETimbar dropper
   --> Software//Microsoft//Windows//CurrentVersion//Explorer//Browser Helper Objects//{489873CE-F3E1-44A3-8E89-04BE26BE4446}/IETimbar.dll
      [DETECTION] Contains recognition pattern of the ADSPY/IETimbar adware or spyware
--> [TempDir]/qq2009.exe
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '4a2692dd.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月12日  15:05
Used time: 00:01 Minute(s)

The scan has been done completely.

   0 Scanned directories
   23 Files were scanned
   11 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   1 files were deleted
   0 Viruses and unwanted programs were repaired
   1 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   12 Files not concerned
   3 Archives were scanned
   0 Warnings
   1 Notes

[病毒样本] Adware Virus DownLoader(释放并下载大量病毒-第290次更新）

回复 81楼 935623508 的帖子

回复 84楼 935623508 的帖子

好