转自avpclub，24个广告

显示全部楼层 · 发表于 2007-5-1 15:02:43

antivir漏掉一个，已经上报
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\AD3'
C:\Documents and Settings\morgan\My Documents\AD3\
  01.rar
[0] Archive type: RAR
--> BaiduSearchTool.exe
  02.rar
[0] Archive type: RAR
--> bg_sc.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Baigoo.G
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  03.rar
[0] Archive type: RAR
--> hdp.exe
      [DETECTION] Contains signature of the dropper DR/Hengbang.U
      [WARNING] Infected files in archives cannot be repaired!
      [1] Archive type: ZIP SFX (self extracting)
      --> FILE0009.dat
      --> PROGRESS.DLL
      --> OCXREG32.EXE
      --> WISE0001.DLL
      --> W32INST.DLL
      --> FILE0001.dat
      --> FILE0002.dat
      --> README.txt
      --> FILE0003.dat
      --> FILE0004.dat
      --> FILE0005.dat
      --> FILE0006.dat
      --> UNWISE32.EXE
      --> HBCALENDAR.DLL
         [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.U.1
         [WARNING] Infected files in archives cannot be repaired!
      --> CALENDAR.INI
      --> CALENDARPROMPT.gif
      --> HENBANG.EXE
         [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.U.2
         [WARNING] Infected files in archives cannot be repaired!
      --> DISTRIBUTER.TXT
      --> ËÑË÷Ö±Í¨³µ1.gif
      --> ³£ÓÃ¹¤¾ß2.gif
      --> MAILBOX.ini
      --> EMAILTHROUGH.DLL
      --> HBHAP.DLL
         [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.U.3
         [WARNING] Infected files in archives cannot be repaired!
      --> ³£ÓÃ¹¤¾ß1.gif
      --> WINXP.ico
      --> WIN2000.ico
      --> WEATHER2.gif
      --> WEATHER1.gif
      --> VSSVER.scc
      --> DEFAULTLINK.ini
      --> PROMPT_MSG.gif
      --> ÓÊÏäÖ±Í¨³µ2.gif
      --> ÓÊÏäÖ±Í¨³µ1.gif
      --> WEBNAVIGATION.DLL
         [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.U.4
         [WARNING] Infected files in archives cannot be repaired!
      --> LOGON.jpg
      --> HBHOMEPAGE2.gif
      --> ËÑË÷Ö±Í¨³µ2.gif
      --> HBHOMEPAGE1.gif
      --> CALENDAR2.gif
      --> CALENDAR1.gif
      --> CONFIG.ini
      --> ACCESS.mdb
      --> TAB2.gif
      --> WEBPAGE.DLL
      --> TOPMARGIN.GIF
      --> RIGHTTOPCORNER.gif
      --> TAB4.gif
      --> TABEND2.gif
      --> TABEND1.gif
      --> SEARCHTHROUGH.DLL
         [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.U.5
         [WARNING] Infected files in archives cannot be repaired!
      --> TAB3.gif
      --> TAB1.gif
      --> BACKGROUND.GIF
      --> BOTTOMMARGIN.GIF
      --> LEFTMARGIN.GIF
      --> MIDDLE.gif
      --> RIGHTMARGIN.GIF
      --> SEARCHSITE.ini
      --> HAP1.1.5.EXE
      [2] Archive type: ZIP SFX (self extracting)
      --> downl.exe
            [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.U.6
            [WARNING] Infected files in archives cannot be repaired!
      --> hbyehoo.dll
            [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Hengbang.U.7
            [WARNING] Infected files in archives cannot be repaired!
      --> FILE0007.dat
      --> FILE0008.dat
      [WARNING] The file was ignored!
  04.rar
[0] Archive type: RAR
--> setup.exe
      [DETECTION] Contains signature of the dropper DR/BHO.AV.3
      [WARNING] Infected files in archives cannot be repaired!
      [1] Archive type: RAR SFX (self extracting)
      --> ad2523.exe
      [WARNING] The file was ignored!
  05.rar
[0] Archive type: RAR
--> 1soutoolbar.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/MMediapd.A
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  06.rar
[0] Archive type: RAR
--> 007install.exe
      [DETECTION] Contains signature of the dropper DR/007SpySoft.308.8
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  07.rar
[0] Archive type: RAR
--> live.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.AC.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  08.rar
[0] Archive type: RAR
--> Webmail.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.AC.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\AD2'
C:\Documents and Settings\morgan\My Documents\AD2\
  01.rar
[0] Archive type: RAR
--> bjsz.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  02.rar
[0] Archive type: RAR
--> lfrmewrk.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BHO.CF.4
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  03.rar
[0] Archive type: RAR
--> ESSNR.exe
      [DETECTION] Contains signature of the SPR/Dldr.WinFixer.O.101 program
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  04.rar
[0] Archive type: RAR
--> 1.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/VB.A.3
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  05.rar
[0] Archive type: RAR
--> f1.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewDotNet.L
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  06.rar
[0] Archive type: RAR
--> cdnforie.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.5
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  07.rar
[0] Archive type: RAR
--> hot.exe
      [DETECTION] Is the Trojan horse TR/Dldr.ZSKiller.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  08.rar
[0] Archive type: RAR
--> emvc.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  09.rar
[0] Archive type: RAR
--> goxe.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  10.rar
[0] Archive type: RAR
--> jrah.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  11.rar
[0] Archive type: RAR
--> ad3248.exe
      [DETECTION] Contains signature of the dropper DR/BHO.AV.152
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  12.rar
[0] Archive type: RAR
--> f33.exe
      [DETECTION] Is the Trojan horse TR/BHO.AB.4
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  13.rar
[0] Archive type: RAR
--> f4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.DollarRev.F
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  14.rar
[0] Archive type: RAR
--> feb2.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Agent.CO
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  15.rar
[0] Archive type: RAR
--> is67377.exe
      [DETECTION] Is the Trojan horse TR/Vundo.AJ.52
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
  16.rar
[0] Archive type: RAR
--> cdn.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.3
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年4月30日  23:40
Used time: 00:15 min

The scan has been done completely.

   2 Scanning directories
112 Files were scanned
   30 viruses and/or unwanted programs were found
   2 classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   80 Files not concerned
   27 Archives were scanned
   53 Warnings
   0 Notes
   0 Hidden objects were found

[ 本帖最后由 mofunzone 于 2007-4-30 23:08 编辑 ]

显示全部楼层 · 发表于 2007-5-1 15:06:28

瑞星不怎么杀广告

显示全部楼层 · 发表于 2007-5-1 15:08:30

我的风暴查广告不行呀
才5个

显示全部楼层 · 发表于 2007-5-1 15:09:38

病毒库到用时方恨少呀。。

[ 本帖最后由 mofunzone 于 2007-4-30 23:11 编辑 ]

显示全部楼层 · 发表于 2007-5-1 15:25:12

Scan performed at: 2007-5-1 15:24:29
Scanning Log
NOD32 version 2232 (20070430) NT
Command line: D:\My Documents[1]
Operating memory - is OK
MBR sector of the 2. physical disk - Error reading disk sector
MBR sector of the 3. physical disk - Error reading disk sector
MBR sector of the 4. physical disk - Error reading disk sector

Date: 1.5.2007 Time: 15:24:42
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\My Documents[1]\
D:\My Documents[1]\AD3\02.rar ?RAR ?bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application
D:\My Documents[1]\AD3\02.rar ?RAR ?bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application
D:\My Documents[1]\AD3\02.rar ?RAR ?bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application
D:\My Documents[1]\AD3\02.rar ?RAR ?bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application
D:\My Documents[1]\AD3\02.rar ?RAR ?bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application
D:\My Documents[1]\AD3\02.rar ?RAR ?bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application
D:\My Documents[1]\AD3\03.rar ?RAR ?hdp.exe ?WISE ?HBCalendar.dll - Win32/Adware.Hengbang application
D:\My Documents[1]\AD3\03.rar ?RAR ?hdp.exe ?WISE ?Henbang.exe - Win32/Adware.Hengbang application
D:\My Documents[1]\AD3\03.rar ?RAR ?hdp.exe ?WISE ?hbhap.dll - Win32/Adware.Hengbang application
D:\My Documents[1]\AD3\03.rar ?RAR ?hdp.exe ?WISE ?WebNavigation.dll - Win32/Adware.Hengbang application
D:\My Documents[1]\AD3\03.rar ?RAR ?hdp.exe ?WISE ?SearchThrough.dll - Win32/Adware.Hengbang application
D:\My Documents[1]\AD3\03.rar ?RAR ?hdp.exe ?WISE ?HAP113Dist.exe ?ZIP ?downl.exe - Win32/Adware.Hengbang application
D:\My Documents[1]\AD3\03.rar ?RAR ?hdp.exe ?WISE ?HAP113Dist.exe ?ZIP ?hbyehoo.dll - Win32/Adware.Hengbang application
D:\My Documents[1]\AD3\04.rar ?RAR ?setup.exe ?RAR ?ad2523.exe ?NSIS ?cpush.dll - a variant of Win32/Adware.BHO.AV application
D:\My Documents[1]\AD2\02.rar ?RAR ?lfrmewrk.exe - Win32/Adware.BHO.CF application
D:\My Documents[1]\AD2\03.rar ?RAR ?ESSNR.exe - Win32/Adware.WinFixer application
D:\My Documents[1]\AD2\05.rar ?RAR ?f1.exe - Win32/Adware.NdotNet application
D:\My Documents[1]\AD2\06.rar ?RAR ?cdnforie.dll - Win32/Adware.CDN application
D:\My Documents[1]\AD2\07.rar ?RAR ?hot.exe - probably unknown NewHeur_PE virus [7]
D:\My Documents[1]\AD2\11.rar ?RAR ?ad3248.exe ?NSIS ?cpush.dll - Win32/Adware.BHO.AV application
D:\My Documents[1]\AD2\12.rar ?RAR ?f33.exe - Win32/Adware.ZQuest application
D:\My Documents[1]\AD2\13.rar ?RAR ?f4.exe - Win32/Adware.SurfSideKick application
D:\My Documents[1]\AD2\16.rar ?RAR ?cdn.dll - Win32/Adware.CDN application
Number of scanned files: 127
Number of threats found: 23
Number of active threats: 12
Time of completion: 15:24:55 Total scanning time: 13 sec (00:00:13)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-5-1 15:38:58

15.rar\is67377.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part5.rar\AD2\15.rar;Trojan.Virtumod;;
AD2\15.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part5.rar\AD2;Archive contains infected objects;;
16.rar\cdn.dll;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part5.rar\AD2\16.rar;Adware.Cdn;;
AD2\16.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part5.rar\AD2;Archive contains infected objects;;
My Documents[1].part5.rar;D:\Documents and Settings\dell\桌面\新建文件夹;Archive contains infected objects;;
BaiduSearchTool.exe\data002;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\01.rar\BaiduSearchTool.exe;Adware.Baidu;;
BaiduSearchTool.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\01.rar;Archive contains infected objects;;
AD3\01.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3;Archive contains infected objects;;
bg_sc.exe\data004;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\02.rar\bg_sc.exe;Adware.Baigoo;;
bg_sc.exe\data006;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\02.rar\bg_sc.exe;Adware.Baigoo;;
bg_sc.exe\data007;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\02.rar\bg_sc.exe;Adware.Baigoo;;
bg_sc.exe\data008;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\02.rar\bg_sc.exe;Adware.Baigoo;;
bg_sc.exe\data009;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\02.rar\bg_sc.exe;Adware.Baigoo;;
bg_sc.exe\data010;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\02.rar\bg_sc.exe;Adware.Baigoo;;
bg_sc.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3\02.rar;Archive contains infected objects;;
AD3\02.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part1.rar\AD3;Archive contains infected objects;;
My Documents[1].part1.rar;D:\Documents and Settings\dell\桌面\新建文件夹;Archive contains infected objects;;
ad2523.exe\data001;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part2.rar\AD3\04.rar\setup.exe\ad2523.exe;Adware.Sogou;;
ad2523.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part2.rar\AD3\04.rar\setup.exe;Archive contains infected objects;;
setup.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part2.rar\AD3\04.rar;Archive contains infected objects;;
AD3\04.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part2.rar\AD3;Archive contains infected objects;;
My Documents[1].part2.rar;D:\Documents and Settings\dell\桌面\新建文件夹;Archive contains infected objects;;
03.rar\ESSNR.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\03.rar;Trojan.DownLoader.10963;;
AD2\03.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2;Archive contains infected objects;;
05.rar\f1.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\05.rar;Adware.NewDotNet;;
AD2\05.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2;Archive contains infected objects;;
06.rar\cdnforie.dll;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\06.rar;Adware.Cdn;;
AD2\06.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2;Archive contains infected objects;;
data001\cdnaux.dll;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe\data001\data001;Adware.Cdn;;
data001;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe\data001;Archive contains infected objects;;
data001\data002;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe\data001;Adware.Cdn;;
data001\data004;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe\data001;Adware.Cdn;;
data001\data005;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe\data001;Adware.Cdn;;
data001\data006;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe\data001;Adware.Cdn;;
data001;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe;Archive contains infected objects;;
hot.exe\data002;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe;Adware.Dongtian;;
hot.exe\data003;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar\hot.exe;Adware.Dongtian;;
hot.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\07.rar;Archive contains infected objects;;
AD2\07.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2;Archive contains infected objects;;
ad3248.exe\data001;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\11.rar\ad3248.exe;Adware.Sogou;;
ad3248.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\11.rar;Archive contains infected objects;;
AD2\11.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2;Archive contains infected objects;;
12.rar\f33.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\12.rar;Trojan.StartPage.19993;;
AD2\12.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2;Archive contains infected objects;;
13.rar\f4.exe;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2\13.rar;Adware.Surfside;;
AD2\13.rar;D:\Documents and Settings\dell\桌面\新建文件夹\My Documents[1].part4.rar\AD2;Archive contains infected objects;;
My Documents[1].part4.rar;D:\Documents and Settings\dell\桌面\新建文件夹;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-5-1 15:49:27

AVG报15个,NOD报6个

显示全部楼层 · 发表于 2007-5-1 16:08:29

扫描系统区域...
扫描所选择的目录和文件...
对象: AD2/15.rar is67377.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part5.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Virtumonde.if (KAV 引擎)
对象: My_Documents.part5.rar
路径: C:\Documents and Settings\wangcheng\桌面
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Virtumonde.if (KAV 引擎)
对象: AD3/03.rar/hdp.exe HBCALENDAR.DLL
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (KAV 引擎)
对象: AD3/03.rar/hdp.exe HENBANG.EXE
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (KAV 引擎)
对象: AD3/03.rar/hdp.exe HBHAP.DLL
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (KAV 引擎)
对象: AD3/03.rar/hdp.exe WEBNAVIGATION.DLL
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (KAV 引擎)
对象: AD3/03.rar/hdp.exe SEARCHTHROUGH.DLL
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (KAV 引擎)
对象: AD3/03.rar/hdp.exe/HAP1.1.5.EXE downl.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (KAV 引擎)
对象: AD3/03.rar/hdp.exe/HAP1.1.5.EXE hbyehoo.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (KAV 引擎)
对象: AD3\01.rar=>BaiduSearchTool.exe=>(NSIS o) lzma_nsis0004
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.BaiduBar.I (BD 引擎)
对象: AD3\02.rar=>bg_sc.exe=>(NSIS o) lzma_solid_nsis0004
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Boran.K (BD 引擎)
对象: AD3\02.rar=>bg_sc.exe=>(NSIS o) lzma_solid_nsis0006
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Baigoo.A (BD 引擎)
对象: AD3\02.rar=>bg_sc.exe=>(NSIS o) lzma_solid_nsis0007
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Agent.AGI (BD 引擎)
对象: AD3\02.rar=>bg_sc.exe=>(NSIS o) lzma_solid_nsis0008
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Boran.K (BD 引擎)
对象: AD3\02.rar=>bg_sc.exe=>(NSIS o) lzma_solid_nsis0009
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Boran.K (BD 引擎)
对象: AD3\02.rar=>bg_sc.exe=>(NSIS o) lzma_solid_nsis0010
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Boran.I (BD 引擎)
对象: AD3\03.rar=>hdp.exe=>(ZIP Sfx o) HBHAP.DLL
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Henbang.R (BD 引擎)
对象: AD3\03.rar=>hdp.exe=>(ZIP Sfx o) WEBNAVIGATION.DLL
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.RVU (BD 引擎)
对象: AD3\03.rar=>hdp.exe=>(ZIP Sfx o)=>HAP1.1.5.EXE=>(ZIP Sfx o) hbyehoo.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.RVS (BD 引擎)
对象: AD3\04.rar=>setup.exe=>(RAR Sfx o)=>ad2523.exe=>(NSIS o) lzma_solid_nsis0001
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.CPush.A (BD 引擎)
对象: AD2\02.rar lfrmewrk.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.BHO.BX (BD 引擎)
对象: AD2\03.rar ESSNR.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.WinFixer.C (BD 引擎)
对象: AD2\05.rar f1.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.NewDotNet.AB (BD 引擎)
对象: AD2\06.rar cdnforie.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Cdnup.F (BD 引擎)
对象: AD2\11.rar=>ad3248.exe=>(NSIS o) lzma_solid_nsis0001
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.Sogou.C (BD 引擎)
对象: AD2\12.rar f33.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Trojan.BHO.AW (BD 引擎)
对象: AD2\13.rar f4.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.SurfSide.AX (BD 引擎)
对象: AD2\14.rar feb2.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Trojan.Spy.WebBuy.A (BD 引擎)
对象: AD2\15.rar is67377.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: MemScan:Trojan.Vundo.AJ (BD 引擎)
对象: AD2\16.rar cdn.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part1.rar
Status: 已发现病毒
病毒: Adware.CDN.E (BD 引擎)
对象: My_Documents.part1.rar
路径: C:\Documents and Settings\wangcheng\桌面
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Hengbang.u (7x) (KAV 引擎), Adware.BaiduBar.I, Adware.Boran.K (3x), Adware.Baigoo.A, Trojan.Downloader.Agent.AGI, Adware.Boran.I, Adware.Henbang.R, Adware.RVU, Adware.RVS, Adware.CPush.A, Adware.BHO.BX, Adware.WinFixer.C, Adware.NewDotNet.AB, Adware.Cdnup.F, Adware.Sogou.C, Trojan.BHO.AW, Adware.SurfSide.AX, Trojan.Spy.WebBuy.A, MemScan:Trojan.Vundo.AJ, Adware.CDN.E (BD 引擎)
对象: AD3/04.rar/setup.exe/data.rar/ad2523.exe/stream data0001
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part2.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.av (KAV 引擎)
对象: AD3/06.rar/007install.exe data0001
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part3.rar
Status: 已发现病毒
病毒: not-a-virus:Monitor.Win32.007SpySoft.308 (KAV 引擎)
对象: My_Documents.part2.rar
路径: C:\Documents and Settings\wangcheng\桌面
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.av, not-a-virus:Monitor.Win32.007SpySoft.308 (KAV 引擎)
对象: AD3/07.rar live.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part3.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Agent.ap (KAV 引擎)
对象: AD3/08.rar Webmail.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Agent.ap (KAV 引擎)
对象: My_Documents.part3.rar
路径: C:\Documents and Settings\wangcheng\桌面
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Agent.ap (2x) (KAV 引擎)
对象: AD2/01.rar bjsz.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: AD2/02.rar lfrmewrk.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.cf (KAV 引擎)
对象: AD2/03.rar ESSNR.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:Downloader.Win32.WinFixer.o (KAV 引擎)
对象: AD2/04.rar 1.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdTool.Win32.VB.a (KAV 引擎)
对象: AD2/05.rar f1.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.NewDotNet (KAV 引擎)
对象: AD2/07.rar hot.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Agent.cp (KAV 引擎)
对象: AD2/08.rar emvc.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: AD2/09.rar goxe.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: AD2/10.rar jrah.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: AD2/11.rar/ad3248.exe/stream data0001
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.av (KAV 引擎)
对象: AD2/12.rar f33.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: Trojan.Win32.BHO.ab (KAV 引擎)
对象: AD2/13.rar f4.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part4.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.SurfSide.ax (KAV 引擎)
对象: AD2/14.rar feb2.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\My_Documents.part5.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Agent.co (KAV 引擎)
对象: My_Documents.part4.rar
路径: C:\Documents and Settings\wangcheng\桌面
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.z (4x), not-a-virus:AdWare.Win32.BHO.cf, not-a-virus:Downloader.Win32.WinFixer.o, not-a-virus:AdTool.Win32.VB.a, not-a-virus:AdWare.Win32.NewDotNet, not-a-virus:AdWare.Win32.Agent.cp, not-a-virus:AdWare.Win32.BHO.av, Trojan.Win32.BHO.ab, not-a-virus:AdWare.Win32.SurfSide.ax, not-a-virus:AdWare.Win32.Agent.co (KAV 引擎)
扫描完成: 2007-5-1 16:08
已检查 5 个文件
已发现 5 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2007-5-1 18:41:48

Result: 22 malware found
AdWare.Win32.Boran.z (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\01.rar\bjsz.dll
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\08.rar\emvc.dll
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\09.rar\goxe.dll
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\10.rar\jrah.dll

AdWare.Win32.BHO.cf (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\02.rar\lfrmewrk.exe

AdWare.Win32.NewDotNet (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\05.rar\f1.exe

AdWare.Win32.Agent.cp (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\07.rar\hot.exe

AdWare.Win32.BHO.av (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\11.rar\ad3248.exe
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\04.rar\setup.exe

Trojan.Win32.BHO.ab (virus)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\12.rar\f33.exe

AdWare.Win32.SurfSide.ax (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\13.rar\f4.exe

AdWare.Win32.Agent.co (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\14.rar\feb2.exe

AdWare.Win32.Virtumonde.if (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\15.rar\is67377.exe

AdWare.Win32.Hengbang.u (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\03.rar\hdp.exe\HBCALENDAR.DLL
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\03.rar\hdp.exe\HENBANG.EXE
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\03.rar\hdp.exe\HBHAP.DLL
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\03.rar\hdp.exe\WEBNAVIGATION.DLL
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\03.rar\hdp.exe\SEARCHTHROUGH.DLL
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\03.rar\hdp.exe\HAP1.1.5.EXE\downl.exe
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\03.rar\hdp.exe\HAP1.1.5.EXE\hbyehoo.dll

AdWare.Win32.Agent.ap (adware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\07.rar\live.exe
* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\08.rar\Webmail.dll

Result: 3 Riskware found
Downloader.Win32.WinFixer.o (riskware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\03.rar\ESSNR.exe

AdTool.Win32.VB.a (riskware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD2\04.rar\1.exe

Monitor.Win32.007SpySoft.308 (riskware)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\My\AD3\06.rar\007install.exe

[病毒样本] 转自avpclub，24个广告

本帖子中包含更多资源

本帖子中包含更多资源

23