190.exe（downloader)+下载物8X

显示全部楼层 · 发表于 2009-4-12 15:07:04

MS 国外的家伙

显示全部楼层 · 发表于 2009-4-12 15:10:14

Starting the file scan:

Begin scan in 'D:\kafan\190.rar'
D:\kafan\190.rar
  [0] Archive type: RAR
--> DL.exe
   [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
[NOTE]    A backup was created as '4a119466.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\下载物8X'
D:\kafan\下载物8X\2.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a46945c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
D:\kafan\下载物8X\gyekuc.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '4a4694a7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
D:\kafan\下载物8X\khnwv.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '4a4f9497.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
D:\kafan\下载物8X\reader_s.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a429494.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
D:\kafan\下载物8X\rip10.exe
[DETECTION] Contains recognition pattern of the WORM/Agent.lz.7 worm
[NOTE]    A backup was created as '4a519498.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
D:\kafan\下载物8X\wsjtot.exe
[DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
[NOTE]    A backup was created as '4a4b94a2.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月12日  15:11
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanned directories
   9 Files were scanned
   7 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   7 files were deleted
   0 Viruses and unwanted programs were repaired
   7 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   7 Notes

显示全部楼层 · 发表于 2009-4-12 15:17:39

to rav

显示全部楼层 · 发表于 2009-4-12 15:18:39

显示全部楼层 · 发表于 2009-4-12 15:18:51

居然看见了virut

显示全部楼层 · 发表于 2009-4-12 15:20:14

190那个文件联网三次，我都同意，后有下载病毒行为后被微点一次性清除。

显示全部楼层 · 发表于 2009-4-12 15:23:21

gyekuc.exe;D:\Documents and Settings\Administrator\桌面\8X;Win32.Virut.56;Deleted.;
reader_s.exe;D:\Documents and Settings\Administrator\桌面\8X;Trojan.DownLoad.32229;Deleted.;
rip10.exe;D:\Documents and Settings\Administrator\桌面\8X;Win32.HLLW.Autoruner.4013;Deleted.;
wsjtot.exe;D:\Documents and Settings\Administrator\桌面\8X;Win32.HLLW.Autoruner.6035;Deleted.;
ytiva.exe;D:\Documents and Settings\Administrator\桌面\8X;Probably Trojan.Packed.191;Renamed.;

显示全部楼层 · 发表于 2009-4-12 16:07:10

费尔3个

显示全部楼层 · 发表于 2009-4-12 16:09:48

To SSR

显示全部楼层 · 发表于 2009-4-12 16:23:05

信息 2009-04-12 16:23:11 您此次查毒共查出3个病毒以及危险代码

[病毒样本] 190.exe（downloader)+下载物8X

本帖子中包含更多资源

本帖子中包含更多资源