9 virus

显示全部楼层 · 发表于 2007-4-12 17:25:22

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-7
Start time: 2007-4-12 17:24
Engine(s): KAV engine (AVK 17.3765), BD-Engine (BD 17.3526)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: fyso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: jtso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: mhso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: svchost[1].exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Trojan.ShellHook (BD-Engine)
Object: wgso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: wlso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: wmso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: woso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: ztso.exe
Path: C:\Documents and Settings\Administrator\桌面\virus\virus
Status: Move file into quarantine
Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Analysis complete: 2007-4-12 17:25
9 files checked
9 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-12 17:37:19

BitDefender Antivirus Plus v10
virus.zip=>virus/fyso.exe Infected: BehavesLike:Win32.ExplorerHijack
virus.zip=>virus/jtso.exe Infected: BehavesLike:Win32.ExplorerHijack
virus.zip=>virus/mhso.exe Infected: BehavesLike:Win32.ExplorerHijack
virus.zip=>virus/svchost[1].exe Infected: BehavesLike:Trojan.ShellHook
virus.zip=>virus/wgso.exe Infected: BehavesLike:Win32.ExplorerHijack
virus.zip=>virus/wlso.exe Infected: BehavesLike:Win32.ExplorerHijack
virus.zip=>virus/wmso.exe Infected: BehavesLike:Win32.ExplorerHijack
virus.zip=>virus/woso.exe Infected: BehavesLike:Win32.ExplorerHijack
virus.zip=>virus/ztso.exe Infected: BehavesLike:Win32.ExplorerHijack

显示全部楼层 · 发表于 2007-4-12 17:40:13

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.zip'
C:\Documents and Settings\Administrator\桌面\virus.zip
  [0] Archive type: ZIP
  --> virus/fyso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus/jtso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus/mhso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus/svchost[1].exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> virus/wgso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus/wlso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus/wmso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus/woso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus/ztso.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    A backup was created as '468fff20.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-12 17:41:17

是两个病毒感染了9个文件吧

显示全部楼层 · 发表于 2007-4-12 18:45:07

这个和今天的某贴重复了

显示全部楼层 · 发表于 2007-4-12 21:08:58

avast!吃了个大鸭蛋

没去检查MD5值，可是凭着病毒行为看来除了那个svchost.exe全都是一样的毒

显示全部楼层 · 发表于 2007-4-12 21:19:29

诺顿360杀8过1个svchost[1]过了……

显示全部楼层 · 发表于 2007-4-13 10:26:31

确实是重复了

显示全部楼层 · 发表于 2007-4-13 11:36:10

日期: 2007年4月13日时间: 11:33:45
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\样本\virus.zip
F:\样本\virus.zip ?ZIP ?virus/fyso.exe<病毒 - Win32/Pacex.Gen 病毒>
F:\样本\virus.zip ?ZIP ?virus/jtso.exe<病毒 - Win32/Pacex.Gen 病毒>
F:\样本\virus.zip ?ZIP ?virus/mhso.exe<病毒 - Win32/Pacex.Gen 病毒>
F:\样本\virus.zip ?ZIP ?virus/wgso.exe<病毒 - Win32/Pacex.Gen 病毒>
F:\样本\virus.zip ?ZIP ?virus/wlso.exe<病毒 - Win32/Pacex.Gen 病毒>
F:\样本\virus.zip ?ZIP ?virus/wmso.exe<病毒 - Win32/Pacex.Gen 病毒>
F:\样本\virus.zip ?ZIP ?virus/woso.exe<病毒 - Win32/Pacex.Gen 病毒>
F:\样本\virus.zip ?ZIP ?virus/ztso.exe<病毒 - Win32/Pacex.Gen 病毒>
已扫描文件数量: 11
已发现病毒数量: 8
活动的病毒数量: 1
完成时间: 11:34:18 总共扫描时间: 33 秒 (00:00:33)

怎么才8个

显示全部楼层 · 发表于 2007-4-15 16:06:33

感染了1个

[病毒样本] 9 virus

本帖子中包含更多资源

本帖子中包含更多资源