[病毒样本] 13x

显示全部楼层 · 发表于 2009-4-5 19:35:04

2009/4/5 19:33:44 已删除病毒 Rootkit.Win32.Agent.ijd G:\Temp\Virus\13X\13X[1]\setup_1027272.exe
2009/4/5 19:33:44 已删除木马程序 Backdoor.Win32.Hupigon.gnbw G:\Temp\Virus\13X\13X[1]\service.exe
2009/4/5 19:33:44 已删除木马程序 Backdoor.Win32.Hupigon.gnbw G:\Temp\Virus\13X\13X[1]\service.exe//Petite
2009/4/5 19:33:44 已删除木马程序 Trojan-Downloader.Win32.Agent.bpqm G:\Temp\Virus\13X\13X[1]\4005.exe~
2009/4/5 19:33:44 已删除木马程序 Trojan-Downloader.Win32.Agent.bqep G:\Temp\Virus\13X\13X[1]\llly66.exe//data0002
2009/4/5 19:33:44 已删除木马程序 Trojan-Downloader.Win32.Agent.bqer G:\Temp\Virus\13X\13X[1]\llly66.exe//data0006
2009/4/5 19:33:44 已删除木马程序 Trojan-Dropper.Win32.Agent.aldd G:\Temp\Virus\13X\13X[1]\small66.exe
2009/4/5 19:33:44 已删除木马程序 Trojan-Dropper.Win32.Agent.aldd G:\Temp\Virus\13X\13X[1]\small66.exe//PE_Patch.UPX//UPX
2009/4/5 19:33:44 已删除木马程序 Trojan-Spy.Win32.Agent.ahoi G:\Temp\Virus\13X\13X[1]\llly66.exe
2009/4/5 19:33:44 已删除木马程序 Trojan-Spy.Win32.Agent.ahoi G:\Temp\Virus\13X\13X[1]\llly66.exe//data0008
2009/4/5 19:33:44 已删除木马程序 Trojan.Win32.Agent.byic G:\Temp\Virus\13X\13X[1]\009.exe
2009/4/5 19:33:44 已删除木马程序 Trojan.Win32.Agent.bzek G:\Temp\Virus\13X\13X[1]\llly66.exe//data0007
2009/4/5 19:33:44 已删除木马程序 Trojan.Win32.Agent.bzfn G:\Temp\Virus\13X\13X[1]\llly66.exe//data0004
2009/4/5 19:33:44 已删除木马程序 Trojan.Win32.Agent2.gsr G:\Temp\Virus\13X\13X[1]\lqbz81.exe
2009/4/5 19:33:44 已删除恶意程序 HackTool.Win32.Agent.eh G:\Temp\Virus\13X\13X[1]\D.tmp
2009/4/5 19:33:44 已删除恶意程序 HackTool.Win32.Agent.eh G:\Temp\Virus\13X\13X[1]\D.tmp//ASPack

Miss 5,To KL

显示全部楼层 · 发表于 2009-4-5 20:23:22

VB Kill 5

显示全部楼层 · 发表于 2009-4-5 20:47:53

风险程序 2009-04-05  20:48:23 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\small66.exe Win32.Adware.BHO.348160 (广告软件) 隔离成功
病毒 2009-04-05  20:48:21 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\setup_1027272.exe Win32.Troj.Agent.114688 (跑跑偷车贼变种) 隔离成功
病毒 2009-04-05  20:48:21 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\service.exe Win32.Troj.Delf.nk.808960 (木马程序) 隔离成功
病毒 2009-04-05  20:48:21 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\lqbz81.exe Win32.Hack.Agent.u.60928 (后门程序) 隔离成功
病毒 2009-04-05  20:48:21 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\llly66.exe Win32.Troj.Agent.40960 (木马程序) 隔离成功
病毒 2009-04-05  20:48:21 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\D.tmp Win32.Troj.ArpSpoof.dx.32768 (木马程序) 隔离成功
病毒 2009-04-05  20:48:21 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\4005.exe~ Win32.Troj.Delf.bq.73728 (木马程序) 隔离成功
病毒 2009-04-05  20:48:21 C:\Documents and Settings\Administrator\桌面\13X\13X[1]\009.exe Win32.Troj.Crypt.D.184320 (木马程序) 隔离成功

显示全部楼层 · 发表于 2009-4-5 23:48:19

Begin scan in 'C:\Documents and Settings\Administrator\桌面\13X'
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\009.exe
--> Object
   [DETECTION] Contains recognition pattern of the W32/Cekar.B Windows virus
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\40.exe
[DETECTION] Contains recognition pattern of the ADSPY/Cdnup.A.3 adware or spyware
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\4005.exe~
[DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\62.dll
[DETECTION] Contains recognition pattern of the ADSPY/Cdnup.A.6 adware or spyware
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\D.tmp
--> Object
   [DETECTION] Is the TR/Drop.Spy.Pca.A.2 Trojan
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\llly66.exe
  [0] Archive type: NSIS
[DETECTION] Contains recognition pattern of the DR/Spy.Agent.ahoi dropper
--> [UnknownDir]/install.exe
   [DETECTION] Is the TR/Agent.FWQ Trojan
--> [UnknownDir]/nlpsa.txt
   [DETECTION] Is the TR/Downloader.Gen Trojan
--> [UnknownDir]/setup.exe
   [DETECTION] Is the TR/Agent.fwq.1 Trojan
--> [UnknownDir]/sysmain.dat
   [DETECTION] Is the TR/Kaba.73278 Trojan
--> [UnknownDir]/sysvc.dat
   [DETECTION] Is the TR/Spy.Agent.abzr Trojan
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\lqbz81.exe
[DETECTION] Is the TR/Agent2.gsr Trojan
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\service.exe
[DETECTION] Is the TR/ATRAPS.Gen Trojan
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\setup_1027272.exe
--> Object
   [1] Archive type: OVL
   --> Object
      [DETECTION] Is the TR/Agent.pxw Trojan
C:\Documents and Settings\Administrator\桌面\13X\13X[1]\small66.exe
--> Object
   [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
File ID  Filename Size (Byte) Result
25307282  IETimbar(-50331498).exe  147.31 KB  UNDER ANALYSIS
25307281  61.api  53.64 KB  UNDER ANALYSIS

显示全部楼层 · 发表于 2009-4-6 00:11:57

费尔日志(最新病毒库)：

NetSniff.garh,病毒,13X[1]\D.tmp,Manual scan
TrojanDownloader.Agent.bpqm.jtng,木马,13X[1]\4005.exe~
Adware.BHO.ezj.uzcw,广告程序,13X[1]\small66.exe
Trojan.Agent2.ebr.ldiu,木马,13X[1]\lqbz81.exe
Trojan.Agent.abcb.fojo.arc,木马,13X[1]\llly66.exe
Trojan.JunkCode.Gen.pmdc,木马,13X[1]\setup_1027272.exe
Backdoor.Hupigon.gnbw.xmul,后门,13X[1]\service.exe
Trojan.OnLineGames.gen.a,木马,13X[1]\009.exe

费尔发现了八个，成绩还能够让人认可。

[病毒样本] 13x

本帖子中包含更多资源

miss 5