火狐狸木马(4)

伯夷叔齐

火狐狸里的木马居然.......累......

没有办法了,还有三个文件由于太大，发不上来,希望大家指教用WINRAR的分段压缩方法!!!

[ 本帖最后由 伯夷叔齐 于 2007-5-14 00:43 编辑 ]

alleynsun

detected: Trojan program Backdoor.Win32.Bandok.d        URL: http://bbs.kafan.cn/attachment.php?aid=69462//EE80F969d01//10¸öÑù±¾/BANDOOK   V1.2.EXE//PE_Patch//MewBundle//MEW
我用火狐，怎么没中过...

小邪邪

scottxzt

Begin scan in 'D:\Documents and Settings\dell\桌面\EE80F969d01.rar'
D:\Documents and Settings\dell\桌面\
D:\Documents and Settings\dell\桌面\EE80F969d01.rar
  [0] Archive type: RAR
    --> EE80F969d01
      [1] Archive type: RAR
      --> 10¸öÑù±¾\BANDOOK   V1.2.EXE
          [DETECTION] Contains signature of the backdoor control software BDC/Bandok.d.A.
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\builder.exe
          [DETECTION] Contains signature of the backdoor control software BDC/VB.adf.
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\DOWN1.1.exe
          [DETECTION] Contains signature of the construction kit KIT/Agent.N
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\editor.exe
          [DETECTION] Is the Trojan horse TR/Apher.Gen.A
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\EditServer.exe
          [DETECTION] Contains signature of the backdoor control software BDC/Aviaent.
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\mercury.exe
          [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Small.EM.4 Backdoor server programs
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\nc.exe
          [DETECTION] Contains signature of the SPR/Delf.1.A.2 program
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\NetCat.exe
          [DETECTION] Contains signature of the SPR/RemoteAdmin.Net program
          [WARNING]   Infected files in archives cannot be repaired!
      --> 10¸öÑù±¾\PEEP.EXE
          [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/PeepViewer.G Backdoor server programs
          [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!


End of the scan: 2007年5月14日  00:28
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
      9 viruses and/or unwanted programs were found

tonger2003

已删除: 木马程序 Backdoor.Win32.Bandok.d        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\BANDOOK   V1.2.EXE//PE_Patch//MewBundle//MEW
已删除: 木马程序 Backdoor.Win32.VB.adf        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\builder.exe
已删除: 恶意程序 Constructor.Win32.Agent.n        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\DOWN1.1.exe//UPX
已删除: 木马程序 Trojan-Downloader.Win32.Aphex.10.a        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\editor.exe//UPX//Splasher
已删除: 木马程序 Backdoor.Win32.Small.ou        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\EditServer.exe
已删除: 木马程序 Backdoor.Win32.Small.em        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\mercury.exe
已删除: 风险软件 not-a-virus:RemoteAdmin.Win32.NetCat        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\nc.exe
已删除: 风险软件 not-a-virus:RemoteAdmin.Win32.NetCat        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\NetCat.exe
已删除: 木马程序 Backdoor.Win32.PeepViewer.202        文件: C:\Documents and Settings\Administrator\桌面\EE80F969d01.rar/EE80F969d01/10个样本\PEEP.EXE

欠妳緈諨

NOD32

欠妳緈諨

AVAST

dyw1021

费尔 9个

jlennon

tracydk

原帖由 伯夷叔齐 于 2007-5-14 00:21 发表
火狐狸里的木马居然.......累......

没有办法了,还有三个文件由于太大，发不上来,希望大家指教用WINRAR的分段压缩方法!!!