qvod&other[update_629-638][567L]

显示全部楼层 · 发表于 2010-5-9 13:01:23

up to 121

显示全部楼层 · 发表于 2010-5-10 09:36:08

117-121
1x to avast,3x to forti

显示全部楼层 · 发表于 2010-5-10 09:50:03

更新

显示全部楼层 · 发表于 2010-5-10 10:04:14

122-126
ess kill5个

http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= 多个威胁连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: E:\谷歌浏览器\chrome.exe.
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > 4D61DF3A69F8079CDD28AA20CA4E645C Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > 4D61DF3A69F8079CDD28AA20CA4E645C > RAR > Server.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > 0A0C1F12FF24A127127D50A18B7A0D11 Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > 0A0C1F12FF24A127127D50A18B7A0D11 > RAR > Server.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > 653FA2F7873C50D9F504F03B2A703C5D Win32/TrojanDownloader.Adload.NGD 特洛伊木马
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > 653FA2F7873C50D9F504F03B2A703C5D > UPX v13_m2 Win32/TrojanDownloader.Adload.NGD 特洛伊木马
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > EF44586D961DDFD981853CDEFF9BCF13 Win32/TrojanDownloader.Agent.PXP 特洛伊木马的变种
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > EF44586D961DDFD981853CDEFF9BCF13 > CAB > QVODM~1.EXE Win32/TrojanDownloader.Agent.PXP 特洛伊木马的变种
http://bbs.kafan.cn/attachment.p ... jJNY2ZBVEUvOS9JaTQ= > RAR > BA359E08C2543FC2EB09AE166529BF56 Win32/Kryptik.DTG 特洛伊木马的变种

显示全部楼层 · 发表于 2010-5-10 12:01:01

122-126 to autovin(panda)

显示全部楼层 · 发表于 2010-5-10 12:43:25

up to 126
Beginning disinfection:
C:\Users\morgan\Desktop\122-126\EF44586D961DDFD981853CDEFF9BCF13
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
C:\Users\morgan\Desktop\122-126\BA359E08C2543FC2EB09AE166529BF56
[DETECTION] Contains recognition pattern of the DR/MicroJoiner.Gen dropper
[NOTE]    The file was deleted!
C:\Users\morgan\Desktop\122-126\653FA2F7873C50D9F504F03B2A703C5D
[DETECTION] Is the TR/Dldr.Clic.nbp.1 Trojan
[NOTE]    The file was deleted!
C:\Users\morgan\Desktop\122-126\4D61DF3A69F8079CDD28AA20CA4E645C
[DETECTION] Contains recognition pattern of the DR/Lisiu.A dropper
[NOTE]    The file was deleted!
C:\Users\morgan\Desktop\122-126\0A0C1F12FF24A127127D50A18B7A0D11
[DETECTION] Is the TR/Spy.Hacko.3 Trojan
[NOTE]    The file was deleted!

End of the scan: 2010年5月9日  21:41
Used time: 00:00 Minute(s)

The scan has been done completely.

   1 Scanned directories
   17 Files were scanned
   8 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   5 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   9 Files not concerned
   3 Archives were scanned
   0 Warnings
   5 Notes

显示全部楼层 · 发表于 2010-5-11 11:59:55

更新

显示全部楼层 · 发表于 2010-5-11 12:01:50

127-131
4x to autovin(panda)

显示全部楼层 · 发表于 2010-5-11 12:50:24

up to 131

显示全部楼层 · 发表于 2010-5-11 14:42:57

127-131
ess kill4个

http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 多个威胁连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: E:\谷歌浏览器\chrome.exe.
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > 97sese.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > 97sese.exe > RAR > Server.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > qvod(1).exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > qvod(1).exe > RAR > Server.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > Qvod.exe Win32/TrojanDownloader.Adload.NGD 特洛伊木马
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > Qvod.exe > UPX v13_m2 Win32/TrojanDownloader.Adload.NGD 特洛伊木马
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > QvodSetupPlus.exe Win32/TrojanDownloader.Agent.PXP 特洛伊木马的变种
http://15.tel.115cdn.com:8080/pi ... 7322e3134352e323236 > RAR > QvodSetupPlus.exe > CAB > QVODS~1.EXE Win32/TrojanDownloader.Agent.PXP 特洛伊木马的变种

[病毒样本] qvod&other[update_629-638][567L]