[病毒样本] 18X

显示全部楼层 · 发表于 2009-5-8 17:40:07

Starting the file scan:

Begin scan in 'C:\Users\Administrator\Desktop\TDDOWNLOAD'
C:\Users\Administrator\Desktop\TDDOWNLOAD\L1.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\L3.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\L7.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\L8.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\L9.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\M23.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\M25.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\M38.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\M39.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\M4.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\M5.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\ok.exe
[DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\S1.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\S10.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\S12.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\S14.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\S2.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\Administrator\Desktop\TDDOWNLOAD\S8.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!

End of the scan: 2009年5月8日  02:39
Used time: 00:03 Minute(s)

The scan has been done completely.

   1 Scanned directories
   18 Files were scanned
   18 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   18 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   18 Notes

显示全部楼层 · 发表于 2009-5-8 17:53:21

E盾全拦截。费尔全杀掉。

显示全部楼层 · 发表于 2009-5-8 18:03:51

扫描报告

2009年5月8日 18:02:54 - 18:02:56

计算机名称: 20090502-1729
扫描类型: 扫描目标
目标: D:\我的文档\Downloads\TDDOWNLOAD

结果: 找到 17 恶意软件

MemScan:Trojan.Dropper.OnlineGames.DW (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\L3.EXE 操作: 删除
D:\我的文档\DOWNLOADS\TDDOWNLOAD\L8.EXE 操作: 删除
D:\我的文档\DOWNLOADS\TDDOWNLOAD\L9.EXE 操作: 删除
Generic.Malware.Fdld.0D7D16B1 (怀疑的感染)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\L7.EXE 操作: 删除
Generic.Onlinegames.14.A6BEE0D7 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\M23.EXE 操作: 删除
Generic.Onlinegames.14.49CCAAF4 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\M25.EXE 操作: 删除
Generic.Onlinegames.14.1B69A3FA (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\M38.EXE 操作: 删除
Generic.Onlinegames.14.78A96108 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\M39.EXE 操作: 删除
Generic.Onlinegames.14.95CDEF72 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\M4.EXE 操作: 删除
Generic.Onlinegames.14.2D027064 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\M5.EXE 操作: 删除
Trojan.Generic.1544982 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\OK.EXE 操作: 删除
Generic.Onlinegames.14.8E704CA7 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\S1.EXE 操作: 删除
Generic.Onlinegames.14.A8FA97DB (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\S10.EXE 操作: 删除
Generic.Onlinegames.14.3F498747 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\S12.EXE 操作: 删除
Generic.Onlinegames.14.0091F635 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\S14.EXE 操作: 删除
Generic.Onlinegames.14.221969F4 (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\S2.EXE 操作: 删除
Generic.Onlinegames.14.0B9433AE (病毒)
D:\我的文档\DOWNLOADS\TDDOWNLOAD\S8.EXE 操作: 删除
统计信息

已扫描:
文件: 18
未扫描: 0
结果:
病毒: 16
间谍软件: 0
可疑项目: 1
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 17
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0
选项

定义版本:
病毒: 2009-05-08_02
间谍软件: 2009-05-08_02
扫描引擎:
F-Secure Aquarius: 11.00.00, 2009-05-04
F-Secure Hydra: 3.08.9080, 2009-05-07
扫描选项:
扫描所有文件
操作:
病毒: 删除受感染文件
间谍软件: 删除受感染文件

显示全部楼层 · 发表于 2009-5-8 18:06:45

All files killed by KIS 2009

显示全部楼层 · 发表于 2009-5-8 18:09:10

凝逸反毒 ok:0|毒:13|末知:4|18/18|每秒2个文件

显示全部楼层 · 发表于 2009-5-8 18:17:21

小A秒杀

2009-5-8 18:15:34 Ivan 2996 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\L1.exe" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\L3.exe" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\L7.exe" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\L8.exe" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\L9.exe" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M4.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M4.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M5.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M5.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M23.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M23.exe\[Embedded_Ix#2210]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M25.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M25.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M38.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M38.exe\[Embedded_Ix#2210]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M39.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\M39.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\ok.exe" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S1.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S1.exe\[Embedded_Ix#2210]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S2.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S2.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S8.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S8.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S10.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S10.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S12.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S12.exe\[Embedded_Ix#1a10]\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S14.exe\[UPX]" file.
2009-5-8 18:15:37 Ivan 2996 Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar\S14.exe\[Embedded_Ix#1a10]\[UPX]" file.

显示全部楼层 · 发表于 2009-5-8 18:31:48

在 D:\My Documents\桌面\test\TDDOWNLOAD\L1.exe 中发现 Backdoor/Bifrose.leb 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\L3.exe 中发现 Backdoor/Bifrose.leb 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\L7.exe 中发现 Trojan/PSW.WOW.aef 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\L8.exe 中发现 Trojan/Agent.abcl 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\L9.exe 中发现 Backdoor/Bifrose.leb 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\M4.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\M5.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\M23.exe 中发现 Trojan/PSW.LdPinch.put 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\M25.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\M38.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\M39.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\ok.exe 中发现 TrojanDownloader.Small.akny 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\S1.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\S2.exe 中发现 Trojan/PSW.LdPinch.pqt 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\S8.exe 中发现 Trojan/PSW.LdPinch.pqt 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\S10.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\S12.exe 中发现 Trojan/Agent.cicj 病毒, 已删除
在 D:\My Documents\桌面\test\TDDOWNLOAD\S14.exe 中发现 Trojan/Agent.cicj 病毒, 已删除

显示全部楼层 · 发表于 2009-5-8 18:35:25

费尔kill all

显示全部楼层 · 发表于 2009-5-8 20:51:43

McAfee 全灭。。

显示全部楼层 · 发表于 2009-5-9 06:35:36

D:\kafan\kafan\L1.exe 已检测: Trojan-GameThief.Win32.WOW!IK
D:\kafan\kafan\L3.exe 已检测: Generic.PWS!IK
D:\kafan\kafan\L7.exe 已检测: Trojan-Dropper.Agent!IK
D:\kafan\kafan\L8.exe 已检测: Trojan-GameThief.Win32.WOW!IK
D:\kafan\kafan\L9.exe 已检测: Generic.PWS!IK
D:\kafan\kafan\M4.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\M5.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\M23.exe 已检测: Generic.Onlinegames!IK
D:\kafan\kafan\M25.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\M38.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\M39.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\ok.exe 已检测: Trojan-Downloader.Win32.Small!IK
D:\kafan\kafan\S1.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\S2.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\S8.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\S10.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\S12.exe 已检测: Trojan-PWS.Win32.LdPinch!IK
D:\kafan\kafan\S14.exe 已检测: Trojan-PWS.Win32.LdPinch!IK

已扫描

文件: 18
跟踪记录: 0
Cookies: 0
进程: 0

已发现

文件: 18
跟踪记录: 0
Cookies: 0
进程: 0
注册表键: 0

[病毒样本] 18X

本帖子中包含更多资源

kv2008 18个