0629-1

sdbsky

....................................

Whkroran

detected: virus Virus.Win32.Drowor.d        URL: http://bbs.kafan.cn/attachment.php?aid=94611//~tmp4496.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.buv        URL: http://bbs.kafan.cn/attachment.php?aid=94612//mm.exe//UPack
detected: Trojan program Trojan-Downloader.JS.Agent.ka        URL: http://bbs.kafan.cn/attachment.php?aid=94613//okkt[1].js

hahacomcn

Start of the scan: 2007年6月29日  20:42

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\~tmp4496.rar'
C:\Documents and Settings\Administrator\桌面\~tmp4496.rar
  [0] Archive type: RAR
  --> ~tmp4496.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
      [INFO]      A backup was created as '46f1feac.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\mm.rar'
C:\Documents and Settings\Administrator\桌面\mm.rar
  [0] Archive type: RAR
  --> mm.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
      [INFO]      A backup was created as '46b2fea6.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'

taihuxian

Virus: Virus.Win32.Drowor.d

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-Downloader.Win32.Agent.buv

Virus found while downloading Web content.

Address: bbs.kafan.cn


Virus: Trojan-Downloader.JS.Agent.ka

Virus found while downloading Web content.

Address: bbs.kafan.cn

woai_jolin

2007/6/29 20:41:03        Scanning Log
2007/6/29 20:41:03        Version of virus signature database: 2364 (20070629)
2007/6/29 20:41:03        Date: 29.6.2007  Time: 20:41:03
2007/6/29 20:41:03        Scanned disks, folders and files: D:\virus\
2007/6/29 20:41:05        D:\virus\mm.rar - Win32/Drowor.NAB virus - deleted - quarantined
2007/6/29 20:41:05        D:\virus\mm.rar » RAR » mm.exe - Win32/Drowor.NAB virus
2007/6/29 20:41:05        Number of scanned files: 8
2007/6/29 20:41:05        Number of threats found: 1
2007/6/29 20:41:05        Time of completion: 20:41:05  Total scanning time: 2 sec (00:00:02)

风雪

费尔三个。

hj5abc

Scanned disks, folders and files: F:\~tmp4496.rar
F:\~tmp4496.rar ?RAR ?~tmp4496.exe - is OK
F:\~tmp4496.rar:Zone.Identifier - is OK
Number of scanned files: 2

Scanned disks, folders and files: F:\mm.rar
F:\mm.rar ?RAR ?mm.exe - Win32/Drowor.NAB virus - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1

Scanned disks, folders and files: F:\virus.rar
F:\virus.rar ?RAR ?003[1].htm - is OK
F:\virus.rar ?RAR ?okkt[1].js - is OK
F:\virus.rar ?RAR ?001[1].htm - is OK
F:\virus.rar:Zone.Identifier - is OK
Number of scanned files: 4

1688388728

病毒: Virus.Win32.Drowor.d
檔案: ~tmp4496[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BY1GQU95
處理序: GreenBrowser.exe
病毒: Trojan-Downloader.Win32.Agent.buv
檔案: mm[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\MUFNPT5O
處理序: GreenBrowser.exe
病毒: Trojan-Downloader.JS.Agent.ka
檔案: virus[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6MHY9B3R
處理序: GreenBrowser.exe

红心王子

C:\Documents and Settings\Administrator\桌面\~tmp
4496.rar>>~tmp4496.exe>>upack0.34       Trojan.DL.Win32.Agent.wgd
C:\Documents and Settings\Administrator\桌面\mm.r
ar>>mm.exe>>upack0.34     Worm.Win32.Agent.j
狮子吃掉2个

promised

C:/ABC/\mm.rar:\mm.exe - Signature 'Trojan-PWS.Win32.Small.br' found
C:/ABC/\mm.rar
C:/ABC/\virus.rar:\003[1].htm
C:/ABC/\virus.rar:\okkt[1].js - Signature 'Trojan-Downloader.JS.Agent.ka' found
C:/ABC/\virus.rar
C:/ABC/\~tmp4496.rar:\~tmp4496.exe - Signature 'Trojan-PWS.Win32.Small.br' found
C:/ABC/\~tmp4496.rar

        7 Files scanned
          (3 Archives with 4 files)
        3 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.032