3个

显示全部楼层 · 发表于 2011-1-10 06:59:29

360sd kill all
all.exe
行为和木马比较相似的程序

易盘_163pan.com.exe
代-理型病毒(TrojanClicker/NSIS.Agent.BD)

ldr.exe
木马程序(Gen:Trojan.Heur.Zbot.fmW@c45kGl)

显示全部楼层 · 发表于 2011-1-10 07:14:13

ess kill 3
2011-1-10 7:12:14 文件系统实时防护文件 C:\Documents and Settings\Administrator\桌面\样本\3g\all.exe Win32/Spy.Zbot.YW 特洛伊木马通过删除清除 - 已隔离 PC-20110106OORQ\Administrator 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2011-1-10 7:12:13 文件系统实时防护文件 C:\Documents and Settings\Administrator\桌面\样本\3g\易盘_163pan.com.exe NSIS/TrojanClicker.Agent.BD 特洛伊木马已删除 - 已隔离 PC-20110106OORQ\Administrator 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2011-1-10 7:12:11 文件系统实时防护文件 C:\Documents and Settings\Administrator\桌面\样本\3g\ldr.exe Win32/Spy.Zbot.JF 特洛伊木马的变种通过删除清除 - 已隔离 PC-20110106OORQ\Administrator 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2011-1-10 07:52:56

卡巴斯基报告加壳木马

显示全部楼层 · 发表于 2011-1-10 09:42:50

mcafee kill

显示全部楼层 · 发表于 2011-1-10 11:01:13

KIS

检测到威胁: Trojan-Downloader.Win32.NSIS.gz E:\download\3g.rar/易盘_163pan.com.exe/data0016/data0001
检测到威胁: Trojan-Spy.Win32.Zbot.gen E:\download\3g.rar/ldr.exe
检测到威胁: Trojan-Spy.Win32.Zbot.axoe E:\download\3g.rar/all.exe/UPX

显示全部楼层 · 发表于 2011-1-10 11:23:52

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Tim\桌面\test\3g'
C:\Documents and Settings\Tim\桌面\test\3g\all.exe
[DETECTION] Is the TR/Kazy.7419 Trojan
[NOTE]    A backup was created as '46f5d54c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Tim\桌面\test\3g\ldr.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
[NOTE]    A backup was created as '5e68fa93.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Tim\桌面\test\3g\易盘_163pan.com.exe
[0] Archive type: NSIS
  [DETECTION] Is the TR/Dldr.Agent.HC Trojan
--> ProgramFilesDir/remote.exe
  [DETECTION] Is the TR/Dldr.Agent.HC Trojan
--> ProgramFilesDir/sobar.exe
  [DETECTION] Contains recognition pattern of the ADSPY/BaiduBar.572 adware or spyware
--> [ProgramFilesDir]/baidu/bar/BDBar_tmp/BaiduBar.dll
  [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
[NOTE]    A backup was created as '0c2229f0.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: Monday, 10 January, 2011  11:22
Used time: 01:40 Minute(s)

The scan has been done completely.

   1 Scanned directories
   26 Files were scanned
   5 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   3 files were deleted
   0 Viruses and unwanted programs were repaired
   3 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   21 Files not concerned
   3 Archives were scanned
   0 Warnings
   3 Notes

显示全部楼层 · 发表于 2011-1-10 11:34:51

费尔kill

显示全部楼层 · 发表于 2011-1-10 11:35:59

avast kill

显示全部楼层 · 发表于 2011-1-10 11:38:42

mse杀了2个

显示全部楼层 · 发表于 2011-1-10 13:31:45

"";"C:\Users\Administrator\Downloads\3g.rar:\ldr.exe";"可能受未知病毒 Win32/DH.CAFF8402A2 感染";"已移至病毒库"
"";"C:\Users\Administrator\Downloads\3g.rar:\all.exe";"特洛伊木马 PSW.Generic8.ARGE";"已移至病毒库"

miss1

[病毒样本] 3个

本帖子中包含更多资源

评分