过小红伞的

kingmuro

2009-05-12 12:34:37        gxf        3132        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\110\AivtieX\AivtieX.exe\[UPX]\[Embedded_Ra#0ff30]" file.

burt2008

2009-05-12 12:48:25        F:\TDDOWNLOAD\AivtieX.exe,        Malware.Win32.Suspect.e,        未处理


微點殺毒

saga3721

玩CMD的，运行红伞报，之后无异样，重启无异样
'TR/Hijacker.Gen [trojan]'×2
'DIAL/Generic [dialer]'×2

[ 本帖最后由 saga3721 于 2009-5-12 14:07 编辑 ]

Sebastian

AivtieX.exe下载的木马群全部被红伞消灭了~
Starting the file scan:

Begin scan in 'D:\kafan\L7.exe'
D:\kafan\L7.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\L8.exe'
D:\kafan\L8.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\L9.exe'
D:\kafan\L9.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M39.exe'
D:\kafan\M39.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M38.exe'
D:\kafan\M38.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M23.exe'
D:\kafan\M23.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M5.exe'
D:\kafan\M5.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M25.exe'
D:\kafan\M25.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M4.exe'
D:\kafan\M4.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S10.exe'
D:\kafan\S10.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S8.exe'
D:\kafan\S8.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S1.exe'
D:\kafan\S1.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S2.exe'
D:\kafan\S2.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S12.exe'
D:\kafan\S12.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S14.exe'
D:\kafan\S14.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S15.exe'
D:\kafan\S15.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S16.exe'
D:\kafan\S16.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S21.exe'
D:\kafan\S21.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S01.exe'
D:\kafan\S01.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M33.exe'
D:\kafan\M33.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M37.exe'
D:\kafan\M37.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M15.exe'
D:\kafan\M15.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\M24.exe'
D:\kafan\M24.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S13.exe'
D:\kafan\S13.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S17.exe'
D:\kafan\S17.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S20.exe'
D:\kafan\S20.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\S11.exe'
D:\kafan\S11.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\a1.exe'
D:\kafan\a1.exe
    [DETECTION] Is the TR/Agent.22933 Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\a2.exe'
D:\kafan\a2.exe
    [DETECTION] Is the TR/Obfuscated.KU.447 Trojan
    --> ProgramFilesDir/15.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\a8.exe'
D:\kafan\a8.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the SPR/Hacktool.28501 program
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\sb.exe'
D:\kafan\sb.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\01.exe'
D:\kafan\01.exe
    [DETECTION] Is the TR/Dldr.Small.jqh Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\ok.exe'
D:\kafan\ok.exe
    [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\L1.exe'
D:\kafan\L1.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\L3.exe'
D:\kafan\L3.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年5月12日  13:59
Used time: 00:05 Minute(s)

The scan has been done completely.

      0 Scanned directories
     37 Files were scanned
     36 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
     35 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
     35 Notes

kingsheet

卡巴
检测到：木马程序 Trojan-Downloader.Win32.Geral.lw        URL: http://bbs.kafan.cn/attachment.p ... 109398//AivtieX.exe

will

在 AivtieX.exe 中发现 TrojanDownloader.Agent.bebh 病毒

huangqian202

微点杀毒报

bjkk988

小红伞照杀不误。

wrq

Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed


A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... f3&t=1242122253
Information Is the TR/Dldr.Geral.LW Trojan


--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.166, VDF 7.1.3.187

lyruyitong

伞杀！