病毒样本

wowoo

小红伞挂了

pamier2001

对象: firewall.exe
        病毒: DeepScan:Generic.Sdbot.C517DDC1 (BD 引擎)
对象: winamp.exe
        病毒: Backdoor.Win32.VanBot.ax (KAV 引擎), Backdoor.SDBot.VanBot.A (BD 引擎)

promised

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:        17:30:54 2007-4-6

+ Scan result:        



E:\20070404病毒样本.rar/virus\winamp.exe -> Backdoor.VanBot.ax : No action taken.


::Report end

[ 本帖最后由 promised 于 2007-4-6 17:32 编辑 ]

风野胤

扫描日志
NOD32 版本 2170 (20070405) NT
命令行: C:\Documents and Settings\fengyeyin\桌面\ ?
?20070404病毒样本.rar
NOD32.EXE CRC 校验检查: 状态正常
d:\Program Files\Eset\nod32.exe - 正常
扫描内存: 未执行（选项禁用）
扫描 MBR 和引导扇区: 未执行（选项禁用）
日期: 2007年4月6日  时间: 17:31:38
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\ ?
?fengyeyin\桌面\20070404病毒样本.rar
C:\Documents and Settings\fengyeyin\桌面\20070404病毒样本. ?
?rar ?RAR ?virus\firewall.exe - Win32/Poebot 木马 变种
C:\Documents and Settings\fengyeyin\桌面\20070404病毒样本. ?
?rar ?RAR ?virus\StartFireWall.exe - 正常
C:\Documents and Settings\fengyeyin\桌面\20070404病毒样本. ?
?rar ?RAR ?virus\winamp.exe - Win32/Poebot 木马
C:\Documents and Settings\fengyeyin\桌面\20070404病毒样本. ?
?rar:Zone.Identifier - 正常
已扫描文件数量: 4
已发现病毒数量: 2
完成时间: 17:31:40 总共扫描时间: 2 秒 (00:00:02)

龙井茶

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\20070404病毒样本.rar'
C:\Documents and Settings\Administrator\桌面\20070404病毒样本.rar
  [0] Archive type: RAR
  --> virus\firewall.exe
      [DETECTION] Contains signature of the worm WORM/Sdbot.91940
  --> virus\winamp.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/VanBot.AX.45 Backdoor server programs
      [INFO]      A backup was created as '4646143e.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

龙井茶

我的红伞怎么就没象楼主说的那样挂了呢?

jlennon

2007-4-6 17:33:27        eAmon        file        C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$VR00.203\20070404病毒样本[1].rar\virus\firewall.exe        a variant of Win32/Poebot trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a file modified by the application: C:\Program Files\WinRAR\WinRAR.exe.
-------------------------------------------------------------------------------------------------------------------------------
2007-4-6 17:33:29        eAmon        file        C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$VR00.203\20070404病毒样本[1].rar\virus\winamp.exe        Win32/Poebot trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a file modified by the application: C:\Program Files\WinRAR\WinRAR.exe.

蓝色牛仔裤

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\20070404病毒样本.rar'
C:\Documents and Settings\Administrator\桌面\
  20070404病毒样本.rar
    [0] Archive type: RAR
    --> virus\firewall.exe
        [DETECTION] Contains signature of the worm WORM/Sdbot.91940
        [WARNING]   Infected files in archives cannot be repaired!
    --> virus\StartFireWall.exe
    --> virus\winamp.exe
        [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/VanBot.AX.45 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

The EQs

Scan performed at: 2007-4-6 17:47:51
Scanning Log
NOD32 version 2170 (20070405) NT
Command line: C:\Documents and Settings\EQ2\桌面\20070404病毒样本.rar
Operating memory - is OK

Date: 6.4.2007  Time: 17:47:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\20070404病毒样本.rar
C:\Documents and Settings\EQ2\桌面\20070404病毒样本.rar ?RAR ?virus\firewall.exe - a variant of Win32/Poebot trojan
C:\Documents and Settings\EQ2\桌面\20070404病毒样本.rar ?RAR ?virus\winamp.exe - Win32/Poebot trojan - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 17:47:57 Total scanning time: 2 sec (00:00:02)

soul20010

BD10
20070404病毒样本.rar=>virus\firewall.exe        Infected: DeepScan:Generic.Sdbot.C517DDC1
20070404病毒样本.rar=>virus\winamp.exe        Infected: Backdoor.SDBot.VanBot.A