内有6个文件

显示全部楼层 · 发表于 2009-4-17 20:40:02

特别警惕，这些都是未知或者己知病毒样本，除非你确保有足够的防御系统，否则请不
以机试毒,本人不承担任何责任,后果自负，也并不代表这是一个新生的病毒、木马或者恶意软件。多引擎在
线病毒扫描里也只有多个杀毒软件报毒,因为这可能是某一款杀毒引擎的错误报警,敬请您自己判断分辩。

解压密码：virus

显示全部楼层 · 发表于 2009-4-17 20:45:31

Starting the file scan:

Begin scan in 'D:\kafan\AGBIG.zip'
D:\kafan\AGBIG.zip
  [0] Archive type: ZIP
--> AGBIG.sys
   [DETECTION] Is the TR/Kryptik.MR Trojan
[NOTE]    A backup was created as '4a2a7a95.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\ATICX.zip'
D:\kafan\ATICX.zip
  [0] Archive type: ZIP
--> ATICX.msi
   [DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '4a317aa3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\BATOO.zip'
Begin scan in 'D:\kafan\DLERP.zip'
D:\kafan\DLERP.zip
  [0] Archive type: ZIP
--> DLERP.txt
   [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.XX Java script virus
[NOTE]    A backup was created as '4a2d7a9b.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\kafan\FUDExe+.exe.zip'
Begin scan in 'D:\kafan\PURUD.zip'
D:\kafan\PURUD.zip
  [0] Archive type: ZIP
--> PURUD.wab
   [DETECTION] Contains recognition pattern of the ADSPY/Rugo.A.11 adware or spyware
[NOTE]    A backup was created as '4a3a7aa4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月17日  20:47
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   12 Files were scanned
   4 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   4 files were deleted
   0 Viruses and unwanted programs were repaired
   4 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   8 Files not concerned
   6 Archives were scanned
   0 Warnings
   4 Notes

显示全部楼层 · 发表于 2009-4-17 22:36:27

费尔（勾选侦测加壳程序）查出4个。

显示全部楼层 · 发表于 2009-4-17 23:10:26

17/4/2009 23:12:00 已偵測: Trojan-Downloader.Win32.Agent.brks C:\Documents and Settings\kato9096\桌面\6\AGBIG.zip/AGBIG.sys
17/4/2009 23:12:00 已偵測: Backdoor.Win32.Hupigon.gqsl C:\Documents and Settings\kato9096\桌面\6\ATICX.zip/ATICX.msi/Petite
17/4/2009 23:12:03 已偵測: Trojan-Downloader.JS.Agent.dxo C:\Documents and Settings\kato9096\桌面\6\DLERP.zip/DLERP.txt
17/4/2009 23:12:12 已偵測: Backdoor.Win32.Poison.zpt C:\Documents and Settings\kato9096\桌面\6\FUDExe+.exe.zip/FUDExe+.exe.vir

to kl

[ 本帖最后由 sam.to 于 2009-4-17 23:13 编辑 ]

显示全部楼层 · 发表于 2009-4-17 23:54:50

Hello,

PURUD.wab_

No malicious code was found in this file.

http://virscan.org/report/73fe74f52b1a99338acf89dcad51ae11.html

[ 本帖最后由 sam.to 于 2009-4-17 23:59 编辑 ]

显示全部楼层 · 发表于 2009-4-18 00:24:06

pctools 1个

显示全部楼层 · 发表于 2009-4-18 09:13:05

(趨勢科技)病毒分析實驗室已證實此檔案PURUD.zip內含有間諜程式,病毒碼0.760.11已可偵測出此威脅,威脅名稱:
ADW_RUGO

註:此分析結果為(趨勢科技)分析報告,不代表本人立場!!

显示全部楼层 · 发表于 2009-4-18 09:25:03

PURUD.zip
AntiVir 報 ADSPY/Rugo.A.11
Microsoft 報 Adware:Win32/Rugo
NOD32 報 Win32/Adware.BHO.NCG
Rising 報 AdWare.Win32.Agent.def

卡巴分析師也太遜了吧.....

显示全部楼层 · 发表于 2009-4-18 21:37:14

McAfee miss

显示全部楼层 · 发表于 2009-4-22 21:58:54

MCAFEE 忒菜了吧晕死

[病毒样本] 内有6个文件

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

趨勢回覆...

回复 5楼 sam.to 的帖子