15个病毒

显示全部楼层 · 发表于 2009-4-1 07:54:07

15个病毒

微点回的

您好，您反馈的样本文件我们已经分析
910C60B25BF0D67481C2DF6F4298B2A2.exe----Rootkit.Win32.Agent.sy
90B770CEFDA02FFB284DB626165D94B5.exe---- Rootkit.Win32.Agent.sz
C781CECE148EFD33FD41217C5FA36B00.exe ---Rootkit.Win32.Agent.ta
CA45B0B736B5B972BA355DF3FD5A01B4.exe----非PE文件
virus.exe---- HackTool.Win32.Agent.bg
8e2c333e3a307fbe602b064edc8ea39f---非病毒文件
EDFBDDE313BC647C74C5E9A96B2A1F9E.exe---非病毒文件
7512AF418DED061D95D6A68F91C3110B.exe----Rootkit.Win32.Agent.tc
CFBA0725E151046356625CCF52A18F4A.exe----Rootkit.Win32.Agent.td
C2FF969BF19E27BA55313EA2BA7FC46D.exe------ Trojan-Downloader.Win32.Agent.qlu
1250A7D57D6713BC1BD6CFADDE114606.exe---- Rootkit.Win32.Agent.sr
14F8B705531A23C2C4EE4F8EE0F83ADC.dll----非病毒文件
07E32319DC161756B87093D071B30149.exe ------Trojan.Win32.Tiny.de
4425AF21D84E4267F96BC59385C64EEB.exe--- Trojan.Win32.Tiny.dd
4E78DB75084619C44106726D9F5BBBCF.exe----Trojan.Win32.Tiny.dr
感谢您的反馈

[ 本帖最后由凝逸反毒于 2009-4-2 10:33 编辑 ]

显示全部楼层 · 发表于 2009-4-1 08:11:13

Beginning disinfection:
C:\Documents and Settings\Administrator\桌面\virus\07E32319DC161756B87093D071B30149.exe
[DETECTION] Is the TR/Crypt.CY.11 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\1250A7D57D6713BC1BD6CFADDE114606.exe
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\4425AF21D84E4267F96BC59385C64EEB.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\4E78DB75084619C44106726D9F5BBBCF.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\90B770CEFDA02FFB284DB626165D94B5.exe
[DETECTION] Contains recognition pattern of the RKIT/Agent.8320.A root kit
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\910C60B25BF0D67481C2DF6F4298B2A2.exe
[DETECTION] Contains recognition pattern of the RKIT/Agent.8320.B root kit
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\C2FF969BF19E27BA55313EA2BA7FC46D.exe
[DETECTION] Is the TR/Crypt.FSPM.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\C781CECE148EFD33FD41217C5FA36B00.exe
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\CFBA0725E151046356625CCF52A18F4A.exe
[DETECTION] Is the TR/Rootkit.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\EDFBDDE313BC647C74C5E9A96B2A1F9E.exe
[DETECTION] Is the TR/Spy.5120.C Trojan
[NOTE]    The file was deleted!

End of the scan: 星期三 2009年4月1日  08:11
Used time: 00:05 Minute(s)

The scan has been done completely.

   1 Scanned directories
   15 Files were scanned
   10 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   10 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   0 Archives were scanned
   0 Warnings
   10 Notes

25307477	14F8B705531A23C2C...DC.dll	7.5 KB	UNDER ANALYSIS
25308110	7512AF418DED061D9...0B.exe	3.78 KB	UNDER ANALYSIS
25307078	8E2C333E3A307FBE6...9F.exe	7.5 KB	UNDER ANALYSIS
25302399	CA45B0B736B5B972B...B4.exe	3.43 KB	DAMAGED FILE (UNKNOWN)
25308111	virus.exe	124 KB	UNDER ANALYSIS

[ 本帖最后由 nosferatu 于 2009-4-1 08:13 编辑 ]

显示全部楼层 · 发表于 2009-4-1 08:15:57

动作好快呀

显示全部楼层 · 发表于 2009-4-1 08:26:46

SEP11MR4 发现9个毒，整包隔离。

显示全部楼层 · 发表于 2009-4-1 08:35:48

nod32 kill 9个。

显示全部楼层 · 发表于 2009-4-1 08:49:32

咖啡8.7发现9个

显示全部楼层 · 发表于 2009-4-1 09:13:27

VB Kill 4

显示全部楼层 · 发表于 2009-4-1 12:05:55

3 files killed by KIS

sent to KL

显示全部楼层 · 发表于 2009-4-1 12:26:58

显示全部楼层 · 发表于 2009-4-1 13:05:57

e:\000木马\virus\07e32319dc161756b87093d071b30149.exe,virus
e:\000木马\virus\1250a7d57d6713bc1bd6cfadde114606.exe,virus
e:\000木马\virus\14f8b705531a23c2c4ee4f8ee0f83adc.dll,virus
e:\000木马\virus\4425af21d84e4267f96bc59385c64eeb.exe,virus
e:\000木马\virus\4e78db75084619c44106726d9f5bbbcf.exe,virus
e:\000木马\virus\7512af418ded061d95d6a68f91c3110b.exe,virus
e:\000木马\virus\8e2c333e3a307fbe602b064edc8ea39f.exe,virus
e:\000木马\virus\90b770cefda02ffb284db626165d94b5.exe,virus
e:\000木马\virus\910c60b25bf0d67481c2df6f4298b2a2.exe,virus
e:\000木马\virus\c2ff969bf19e27ba55313ea2ba7fc46d.exe,virus
e:\000木马\virus\c781cece148efd33fd41217c5fa36b00.exe,virus
e:\000木马\virus\ca45b0b736b5b972ba355df3fd5a01b4.exe,virus
e:\000木马\virus\cfba0725e151046356625ccf52a18f4a.exe,virus
e:\000木马\virus\edfbdde313bc647c74c5e9a96b2a1f9e.exe,virus
e:\000木马\virus\virus.exe,virus

[病毒样本] 15个病毒

本帖子中包含更多资源

回复 2楼 nosferatu 的帖子

本帖子中包含更多资源

Win32:Trojan-gen {Other} 5X