马8x

显示全部楼层 · 发表于 2010-1-6 17:11:36

现在挂马越来越小气了，一次就几只。。

显示全部楼层 · 发表于 2010-1-6 17:12:50

本帖最后由 jason_jiang 于 2010-1-6 17:20 编辑

ne.exe to drweb

MFCS killed all
2.exe：Trojan:Win32/Cinmus.O
3.exe：Program:Win32/Sogou
bb.exe：PWS:Win32/OnLineGames.GP
cc.exe：PWS:Win32/Lolyda.AT、PWS:Win32/OnLineGames.NZ
mssg.exe：TrojanDownloader:Win32/Dogkild.S
nd.exe：TrojanDropper:Win32/Nemqe.B
ne.exe：Worm:Win32/Kufgal.A
ry.exe：Trojan:Win32/Killav.EA

显示全部楼层 · 发表于 2010-1-6 17:24:19

Starting the file scan:

Begin scan in 'F:\8x'
F:\8x\2.exe
[DETECTION] Contains recognition pattern of the ADSPY/AdMedia.ED.726 adware or spyware
--> 52D77ECE7B32424dB93B9A6EFBDDB0DF/[TempDir]/106.exe
   [DETECTION] Is the TR/Cinmus.O.74 Trojan
[NOTE]    The file was deleted!
F:\8x\3.exe
  [0] Archive type: NSIS
[DETECTION] Contains recognition pattern of the DR/BHO.acym.151 dropper
--> SOFTWARE/MicroPlugins/Common/cpush.dll
   [DETECTION] Is the TR/BHO.Gen Trojan
--> SOFTWARE/MicroPlugins/Common/cpush.tmp
   [DETECTION] Is the TR/BHO.Gen Trojan
[NOTE]    The file was deleted!
F:\8x\bb.exe
[DETECTION] Is the TR/ATRAPS.Gen2 Trojan
[NOTE]    The file was deleted!
F:\8x\cc.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
F:\8x\mssg.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
F:\8x\nd.exe
[DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    The file was deleted!
F:\8x\ne.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!
F:\8x\ry.exe
[DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
[NOTE]    The file was deleted!

End of the scan: 2010年1月6日  17:22
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanned directories
   13 Files were scanned
   11 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   8 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   2 Archives were scanned
   0 Warnings
   8 Notes

显示全部楼层 · 发表于 2010-1-6 17:25:33

drweb

106.exe\___;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x\2.exe/___\106.exe;Adware.Cinmus.2268;;
___\106.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x\2.exe/___;发现压缩文件中有被感染的对象;;
2.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;发现压缩文件中有被感染的对象;;
3.exe\cpush.dll;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x\3.exe;Trojan.SoftPush.18;;
3.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;发现压缩文件中有被感染的对象;;
bb.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Trojan.PWS.Wsgame.15922;;
cc.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Trojan.PWS.Wsgame.13788;;
mssg.exe/data001/data002\data001;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x\mssg.exe/data001/data002;Trojan.KillProc.1565;;
data002;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Container contains infected objects;;
data001;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Container contains infected objects;;
mssg.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Container contains infected objects;;
nd.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Trojan.MulDrop.origin;;
ne.exe\data001;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x\ne.exe;Trojan.Siggen.564;;
ne.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Container contains infected objects;;
ne.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;可能 STPAGE.Trojan;;
ry.exe;C:\Documents and Settings\gxf.GENGXF0000\桌面\8x\8x;Trojan.Sniff.116;;

显示全部楼层 · 发表于 2010-1-6 17:34:31

卡巴漏两个上报

显示全部楼层 · 发表于 2010-1-6 17:43:09

微点杀毒软件发现一个

显示全部楼层 · 发表于 2010-1-6 17:58:35

瑞星2010

显示全部楼层 · 发表于 2010-1-6 18:22:29

小红伞全秒。

显示全部楼层 · 发表于 2010-1-6 18:41:31

A2 miss all 蜘蛛全杀

显示全部楼层 · 发表于 2010-1-6 22:09:58

MPAV 全部秒杀

[病毒样本] 马8x

本帖子中包含更多资源

本帖子中包含更多资源