剩余样本2

显示全部楼层 · 发表于 2009-11-10 16:45:57

http://www.dbank.com/download.action?t=40&k=MTEyMDQ3OA==&pcode=LCw3MDk1OSw3MDk1OQ==

显示全部楼层 · 发表于 2009-11-10 19:04:46

filseclab kill all

显示全部楼层 · 发表于 2009-11-10 19:32:52

红伞发现8个
Begin scan in 'C:\Documents and Settings\Administrator\桌面\infected.rar'
C:\Documents and Settings\Administrator\桌面\infected.rar
  [0] Archive type: RAR
--> infected\053062464DB6A37E9A4AF1D0E7BF0EAF
   [DETECTION] Is the TR/Agent.338432.X Trojan
--> infected\603A6695C07100D9C9A7DA79C1937C21
   [DETECTION] Is the TR/Agent.101376 Trojan
--> infected\79AA79471194CB7045C03C97D618103F
   [DETECTION] Is the TR/Agent.ajvg.1 Trojan
--> infected\8717158ECAAB38FA6F7B5CFC9AB625BA
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
--> infected\9CA9BF9E3F1D11AD2DC0A898AE41980D
   [DETECTION] Is the TR/Spy.854016 Trojan
--> infected\AA6FF9B795BD6B42939DF7587230AAE5
   [DETECTION] Contains recognition pattern of the WORM/Dropper.RRW worm
--> infected\AA9DDDC055106F02D413CACCC6BE59A2
   [DETECTION] Contains recognition pattern of the SPR/Dldr.MalwareBytes.A program
--> infected\DCD0C6056EBFFE15F15474C89C4A498A
   [DETECTION] Contains recognition pattern of the W32/Viking.ND Windows virus
[NOTE]    The file was moved to '4b5f4f96.qua'!

显示全部楼层 · 发表于 2009-11-10 20:52:59

过星星

显示全部楼层 · 发表于 2009-11-11 01:38:10

2009/11/11 1:37:12 已清除可能被非法用于破坏您的计算机或隐私数据的合法软件 not-a-virus:Downloader.Win32.MalwareBytes.a G:\Temp\Virus\infected.rar/infected\AA9DDDC055106F02D413CACCC6BE59A2

To KL

显示全部楼层 · 发表于 2009-11-11 22:41:25

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

以上文件不包含恶意代码。

38730760737EC7E5A38D23AA9CA5BAA8, 603A6695C07100D9C9A7DA79C1937C21, DCD0C6056EBFFE15F15474C89C4A498A

以上文件为损坏的Windows可执行文件。

[病毒样本] 剩余样本2