[病毒样本] 9X

显示全部楼层 · 发表于 2009-5-14 12:18:27

躺在机器里好久了……

显示全部楼层 · 发表于 2009-5-14 12:23:38

nis剩了2个

显示全部楼层 · 发表于 2009-5-14 12:29:28

--> virus\IsDrv118.sys
   [DETECTION] Is the TR/Rootkit.Gen Trojan
--> virus\linkinfo.dll
   [DETECTION] Contains code of the W32/Rectix.A Windows virus
--> virus\MKMKrnl.dll
   [DETECTION] Is the TR/mik.A Trojan
--> virus\MPKrnl.dll
   [DETECTION] Is the TR/Dldr.Agent.ansh Trojan
--> virus\nvmini.sys
   [DETECTION] Is the TR/Rootkit.Gen Trojan
--> virus\oleadp.dll
   [DETECTION] Is the TR/Small.bbp Trojan
--> virus\RnmmtpC.dll
   [DETECTION] Contains a recognition pattern of the (harmful) BDS/Agent.aghl back-door program
--> virus\System64.exe
   [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.guhj back-door program

D:\kafan\virus.rar/IsDrv118.sys 已检测: Rootkit.Win32.Agent!IK
D:\kafan\virus.rar/linkinfo.dll 已检测: Trojan-Dropper.Agent!IK
D:\kafan\virus.rar/MKMKrnl.dll 已检测: Trojan.Win32.Agent!IK
D:\kafan\virus.rar/MPKrnl.dll 已检测: Trojan-Dropper.Agent!IK
D:\kafan\virus.rar/nvmini.sys 已检测: Rootkit.Win32.Agent!IK
D:\kafan\virus.rar/oleadp.dll 已检测: Trojan-Dropper.Agent!IK
D:\kafan\virus.rar/RnmmtpC.dll 已检测: Backdoor.Win32.PcClient!IK
D:\kafan\virus.rar/System64.exe 已检测: Virus.Win32.Atraps!IK

显示全部楼层 · 发表于 2009-5-14 12:32:58

2009-05-14 12:31:37 gxf 1672 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\110\virus\virus\IsDrv118.sys" file.
2009-05-14 12:31:41 gxf 1672 Sign of "Win32:Agent-JJY [Trj]" has been found in "C:\Documents and Settings\gxf\桌面\110\virus\virus\linkinfo.dll" file.
2009-05-14 12:31:41 gxf 1672 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\virus\virus\MKMKrnl.dll" file.
2009-05-14 12:31:41 gxf 1672 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\virus\virus\MPKrnl.dll" file.
2009-05-14 12:31:41 gxf 1672 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\110\virus\virus\nvmini.sys" file.
2009-05-14 12:31:41 gxf 1672 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\virus\virus\oleadp.dll" file.
2009-05-14 12:31:41 gxf 1672 Sign of "Win32:Atraps-EP [Trj]" has been found in "C:\Documents and Settings\gxf\桌面\110\virus\virus\System64.exe" file.

显示全部楼层 · 发表于 2009-5-14 15:35:09

Result: 7 malware foundWin32.Almanahe.B (virus)

C:\Documents and Settings\sk\桌面\virus\14\virus.rar\virus\IsDrv118.sys
C:\Documents and Settings\sk\桌面\virus\14\virus.rar\virus\linkinfo.dll
C:\Documents and Settings\sk\桌面\virus\14\virus.rar\virus\nvmini.sys

Trojan.Generic.1459536 (virus)

C:\Documents and Settings\sk\桌面\virus\14\virus.rar\virus\MKMKrnl.dll

Trojan.Downloader.Agent.ZVE (virus)

C:\Documents and Settings\sk\桌面\virus\14\virus.rar\virus\MPKrnl.dll

Trojan.Generic.1602684 (virus)

C:\Documents and Settings\sk\桌面\virus\14\virus.rar\virus\oleadp.dll

Trojan.Generic.1560594 (virus)

C:\Documents and Settings\sk\桌面\virus\14\virus.rar\virus\System64.exe

Scanning Engines:

F-Secure Aquarius: 11.00.00, 2009-05-12
F-Secure Hydra: 3.08.9080, 2009-05-13

显示全部楼层 · 发表于 2009-5-14 16:15:27

卡巴
检测到：木马程序 Rootkit.Win32.Agent.ga URL: http://bbs.kafan.cn/attachment.p ... /virus/IsDrv118.sys

显示全部楼层 · 发表于 2009-5-14 17:51:31

显示全部楼层 · 发表于 2009-5-14 18:26:50

DW
linkinfo.dll;D:\Documents and Settings\Administrator\桌面\virus;Win32.Alman;Deleted.;
MKMKrnl.dll;D:\Documents and Settings\Administrator\桌面\virus;Trojan.DownLoad.12619;Deleted.;
MPKrnl.dll;D:\Documents and Settings\Administrator\桌面\virus;Trojan.DownLoad.12657;Deleted.;
nvmini.sys;D:\Documents and Settings\Administrator\桌面\virus;Win32.Alman;Deleted.;
oleadp.dll;D:\Documents and Settings\Administrator\桌面\virus;Trojan.DownLoad.33857;Deleted.;
RnmmtpC.dll;D:\Documents and Settings\Administrator\桌面\virus;BackDoor.Siggen.138;Deleted.;
System64.exe;D:\Documents and Settings\Administrator\桌面\virus;BackDoor.Pigeon.22160;Deleted.;

显示全部楼层 · 发表于 2009-5-14 21:12:07

McAfee 报了8个

[病毒样本] 9X

本帖子中包含更多资源

avast4.8

本帖子中包含更多资源

浏览过的版块