过eset~一小包

显示全部楼层 · 发表于 2009-12-6 12:39:21

继续潜水....

显示全部楼层 · 发表于 2009-12-6 12:47:55

4 to kl

显示全部楼层 · 发表于 2009-12-6 12:50:18

Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'E:\virus'
E:\virus\Ie(1).exe
[FUND]    Ist das Trojanische Pferd TR/Crypt.ZPACK.Gen
[HINWEIS] Die Datei wurde gelöscht.
E:\virus\s.exe
[FUND]    Enthält Erkennungsmuster der Ad- oder Spyware ADSPY/Zhongsou.CE
[HINWEIS] Die Datei wurde gelöscht.
E:\virus\6ed0.dll
[FUND]    Ist das Trojanische Pferd TR/Zlob.57344.BB
[HINWEIS] Die Datei wurde gelöscht.
E:\virus\11fb.dll
[FUND]    Ist das Trojanische Pferd TR/Agent.49152
[HINWEIS] Die Datei wurde gelöscht.

显示全部楼层 · 发表于 2009-12-6 12:50:40

本帖最后由 z2665 于 2009-12-6 12:52 编辑

Starting the file scan:

Begin scan in 'C:\Users\z2665\Desktop\virus'
C:\Users\z2665\Desktop\virus\11fb.dll
[DETECTION] Is the TR/Agent.49152 Trojan
C:\Users\z2665\Desktop\virus\6ed0.dll
[DETECTION] Is the TR/Zlob.57344.BB Trojan
C:\Users\z2665\Desktop\virus\Ie(1).exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
C:\Users\z2665\Desktop\virus\s.exe
[DETECTION] Contains recognition pattern of the ADSPY/Zhongsou.CE adware or spyware

Beginning disinfection:
C:\Users\z2665\Desktop\virus\11fb.dll
[DETECTION] Is the TR/Agent.49152 Trojan
[NOTE]    The file was deleted!
C:\Users\z2665\Desktop\virus\6ed0.dll
[DETECTION] Is the TR/Zlob.57344.BB Trojan
[NOTE]    The file was deleted!
C:\Users\z2665\Desktop\virus\Ie(1).exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\z2665\Desktop\virus\s.exe
[DETECTION] Contains recognition pattern of the ADSPY/Zhongsou.CE adware or spyware
[NOTE]    The file was deleted!

miss3，to

We received the following archive files:

File ID	Filename	Size (Byte)	Result
25512314	virus.rar	84.74 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25512311	Ie(2).exe	16 KB	UNDER ANALYSIS
25512312	ms.job	260 Byte	UNDER ANALYSIS
14594602	bdfsfltr.sys	279.01 KB	KNOWN CLEAN

Please find a detailed report concerning each individual sample below:

Filename	Result
Ie(2).exe	UNDER ANALYSIS

The file 'Ie(2).exe' has been determined to be 'UNDER ANALYSIS'.

Filename	Result
ms.job	UNDER ANALYSIS

The file 'ms.job' has been determined to be 'UNDER ANALYSIS'.

Filename	Result
bdfsfltr.sys	KNOWN CLEAN

The file 'bdfsfltr.sys' has been determined to be 'KNOWN CLEAN'.In particular this means that we could not find any maliciouscontent. Please note that the file is part of 'BitDefender Antivirus2009'.
我看到了BD。。。。

显示全部楼层 · 发表于 2009-12-6 12:51:24

显示全部楼层 · 发表于 2009-12-6 13:03:25

本帖最后由 adad2008 于 2009-12-6 13:04 编辑

kv

在 E:\Documents and Settings\Administrator\桌面\virus.rar->virus\6ed0.dll 中发现 Trojan/Pugolbho.bq 病毒, 已删除
在 E:\Documents and Settings\Administrator\桌面\virus.rar->virus\11fb.dll TrojanDownloader.Adik.cz

显示全部楼层 · 发表于 2009-12-6 13:08:08

2009-12-6 13:06:08 SYSTEM 636 Sign of "Win32:Dogrobot [Drp]" has been found in "D:\My Documents\桌面\test\virus\virus\Ie(1).exe" file.
2009-12-6 13:06:10 SYSTEM 636 Sign of "Win32:Adware-gen [Adw]" has been found in "D:\My Documents\桌面\test\virus\virus\s.exe" file.
2009-12-6 13:06:12 SYSTEM 636 Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\virus\6ed0.dll" file.
2009-12-6 13:06:13 SYSTEM 636 Sign of "Win32:Agent-GRW [Trj]" has been found in "D:\My Documents\桌面\test\virus\virus\11fb.dll" file.

avast报毒

显示全部楼层 · 发表于 2009-12-6 13:34:25

瑞星2010
Trojan.Win32.Generic.11F1F31C
Trojan.Win32.Generic.11F28B65

显示全部楼层 · 发表于 2009-12-6 15:13:46

5 to kv2010

显示全部楼层 · 发表于 2009-12-6 15:14:17

回复 4# z2665

这个是bd的驱动

[可疑文件] 过eset~一小包

本帖子中包含更多资源

本帖子中包含更多资源