N个VBS病毒

显示全部楼层 · 发表于 2010-1-15 15:15:50

剩余一个
日志太长就不贴出了
无法运行

显示全部楼层 · 发表于 2010-1-15 15:16:44

sifaab.vbs clean

显示全部楼层 · 发表于 2010-1-15 16:50:27

来看看VBA32

不容易啊

显示全部楼层 · 发表于 2010-1-15 21:19:39

2010/1/15 21:17:47 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\COLKJYU.VBS Generic.dx!krf (Trojan)
2010/1/15 21:17:47 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\DTFOLDHU.VBS Generic.dx!jkn (Trojan)
2010/1/15 21:17:47 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\HMOIYJQ.VBS Generic.dx!krf (Trojan)
2010/1/15 21:17:48 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\KSKTD.VBS Generic.dx!krf (Trojan)
2010/1/15 21:17:48 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\UGLBPXK.VBS Generic.dx!krf (Trojan)
2010/1/15 21:17:48 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\UHQZF.VBS Generic.dx!krf (Trojan)
2010/1/15 21:17:48 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\ZHATCAC.VBS Generic.dx!krf (Trojan)
2010/1/15 21:17:48 No Action Taken ekincheng ODS C:\Users\ekincheng\Desktop\anbfg.rar\FWTGEIPG.VBS Generic.dx!krf (Trojan)

显示全部楼层 · 发表于 2010-1-15 22:10:17

卡巴杀的就没下载下来。。

显示全部楼层 · 发表于 2010-1-15 23:34:40

VBS是个好东西

显示全部楼层 · 发表于 2010-1-15 23:37:48

Starting the file scan:

Begin scan in 'E:\anbfg.rar'
E:\anbfg.rar
  [0] Archive type: RAR
--> anbfg.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> bzahk.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> colkjyu.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
--> dtfoldhu.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
--> fbvok.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> fdyoi.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> frm.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> hmoiyjq.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
--> inp.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> jknjh.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> kbim.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> ksktd.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
--> lgqzo.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> ljmglmxw.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> mksfmqw.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> nyzq.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> sjdibx.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> sxvha.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> ucgaoh.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> uglbpxk.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
--> uhqzf.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
--> wenlea.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> wwfps.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> wxcyt.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> zeqal.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> zhatcac.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan
--> zqvmvcb.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> nierh.vbs
   [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
--> kqd.vbs
   [DETECTION] Contains recognition pattern of the VBS/Agent.LA VBS script virus
--> fwtgeipg.vbs
   [DETECTION] Is the TR/Crypt.PEPM.Gen Trojan

Beginning disinfection:
E:\anbfg.rar
[NOTE]    The file was moved to '4bb28bae.qua'!

End of the scan: 2010年1月15日  23:35
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   33 Files were scanned
   30 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   0 files were deleted
   0 Viruses and unwanted programs were repaired
   1 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2010-1-15 23:38:14

miss 2个杀30 move 1

显示全部楼层 · 发表于 2010-1-16 15:54:08

kis 剩下11个

显示全部楼层 · 发表于 2010-1-16 21:41:33

厉害的，加密了，a2 找到15

[病毒样本] N个VBS病毒

本帖子中包含更多资源

本帖子中包含更多资源