几个小毒

显示全部楼层 · 发表于 2009-3-25 17:14:17

咖啡8.7拦截的

显示全部楼层 · 发表于 2009-3-25 17:16:39

2009-3-25 17:17:25 1237972645 Administrator 744 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\virus\GAMEEEEEEE.PIF" file.
2009-3-25 17:17:30 1237972650 Administrator 744 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\virus\A11.CSS" file.
2009-3-25 17:17:30 1237972650 Administrator 744 Sign of "HTML:Agent-T [Expl]" has been found in "d:\我的文档\桌面\virus\ILINK.HTM" file.
2009-3-25 17:17:30 1237972650 Administrator 744 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\virus\45r65y" file.
2009-3-25 17:17:30 1237972650 Administrator 744 Sign of "VBS:Obfuscated-gen [Trj]" has been found in "d:\我的文档\桌面\virus\xmybrx.js" file.
2009-3-25 17:17:30 1237972650 Administrator 744 Sign of "VBS:Obfuscated-gen [Trj]" has been found in "d:\我的文档\桌面\virus\ms06014.htm" file.

显示全部楼层 · 发表于 2009-3-25 17:20:35

红伞剩1个
25301108 ILINK.HTM 1.79 KB UNDER ANALYSIS

显示全部楼层 · 发表于 2009-3-25 17:24:42

Begin scan in 'E:\DownLoad\virus\virus'
E:\DownLoad\virus\virus\45r65y
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
[DETECTION] Is the TR/Hijacker.Gen Trojan
E:\DownLoad\virus\virus\A11.CSS
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
[DETECTION] Is the TR/Hijacker.Gen Trojan
E:\DownLoad\virus\virus\GAMEEEEEEE.PIF
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
[DETECTION] Is the TR/Hijacker.Gen Trojan
E:\DownLoad\virus\virus\ms06014.htm
[DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
E:\DownLoad\virus\virus\xmybrx.js
[DETECTION] Contains recognition pattern of the HTML/Shellcode.Gen HTML script virus

Beginning disinfection:
E:\DownLoad\virus\virus\45r65y
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was moved to '4a3bf84f.qua'!
E:\DownLoad\virus\virus\A11.CSS
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was moved to '49faf84b.qua'!
E:\DownLoad\virus\virus\GAMEEEEEEE.PIF
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was moved to '4a16f85b.qua'!
E:\DownLoad\virus\virus\ms06014.htm
[DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
[NOTE]    The file was moved to '49f9f88d.qua'!
E:\DownLoad\virus\virus\xmybrx.js
[DETECTION] Contains recognition pattern of the HTML/Shellcode.Gen HTML script virus
[NOTE]    The file was moved to '4a42f887.qua'!

End of the scan: 2009年3月25日  17:23
Used time: 00:01 Minute(s)

The scan has been done completely.

   1 Scanned directories
   6 Files were scanned
   8 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   0 files were deleted
   0 Viruses and unwanted programs were repaired
   5 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   -2 Files not concerned
   0 Archives were scanned
   0 Warnings
   5 Notes

显示全部楼层 · 发表于 2009-3-25 17:34:50

解压密码是多少？

显示全部楼层 · 发表于 2009-3-25 17:36:03

卡巴
已删除：木马程序 Trojan-Downloader.Win32.Agent.bofh 文件: D:\virus\virus\GAMEEEEEEE.PIF
已删除：木马程序 Trojan-Downloader.Win32.Agent.bofh 文件: D:\virus\virus\A11.CSS
已删除：木马程序 Trojan-Downloader.Win32.Agent.bofh 文件: D:\virus\virus\45r65y

剩一个

显示全部楼层 · 发表于 2009-3-25 17:37:25

virus

显示全部楼层 · 发表于 2009-3-25 17:49:45

File ID  Filename Size (Byte) Result
25301107  45r65y  27.5 KB  MALWARE
25301108  ILINK.HTM  1.79 KB  MALWARE
25301109  xmybrx.js  4.63 KB  MALWARE
25301110  ms06014.htm  2.63 KB  MALWARE

显示全部楼层 · 发表于 2009-3-25 20:15:47

DR.WEB
GAMEEEEEEE.PIF - infected with Trojan.DownLoad.33163
A11.CSS - infected with Trojan.DownLoad.33163
45r65y - infected with Trojan.DownLoad.33163

显示全部楼层 · 发表于 2009-3-25 23:25:28

VB Kill 4

[病毒样本] 几个小毒

本帖子中包含更多资源

avast kill all

回复 5楼 kw1129 的帖子

Avira Lab Response - Tracking number 284928