毒5个，过咖啡。已更新。

F-Secure

5个全部过咖啡。10楼还有一个过咖啡的。

[ 本帖最后由 F-Secure 于 2007-7-7 11:30 编辑 ]

The EQs

Scan performed at: 2007-7-7 10:16:59
Scanning Log
NOD32 version 2383 (20070706) NT
Command line: C:\Documents and Settings\EQ2\桌面\毒.rar
Operating memory - is OK

Date: 7.7.2007  Time: 10:17:05
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\毒.rar
C:\Documents and Settings\EQ2\桌面\毒.rar ?RAR ?ad341.exe ?NSIS ?cpush.dll - Win32/Adware.BHO.AV application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\毒.rar ?RAR ?bind_50119.exe - probably a variant of Win32/TrojanDownloader.QQHelper.NCO trojan
C:\Documents and Settings\EQ2\桌面\毒.rar ?RAR ?dodolook078.exe ?NSIS ?1099.exe ?NSIS ?acpidisk.sys - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\毒.rar ?RAR ?my_70018.exe - a variant of Win32/TrojanDownloader.QQHelper.NDD trojan
Number of scanned files: 9
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 10:17:06 Total scanning time: 1 sec (00:00:01)

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\毒.rar'
F:\病毒样本\毒.rar
  [0] Archive type: RAR
  --> bind_50119.exe
      [DETECTION] Is the Trojan horse TR/Agent.20480.200
  --> my_70018.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!

wangjay1980

deleted: adware not-a-virus:AdWare.Win32.BHO.av        File: C:\Documents and Settings\Owner\×ÀÃæ\¶¾.rar/ad341.exe//stream//data0001

Hello,

bind_50119.exed - Trojan-Downloader.Win32.QQHelper.rb,
my_70018.exed - Trojan-Downloader.Win32.QQHelper.rg

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

dodolook078.exed - not-a-virus:AdWare.Win32.Cinmus.f

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

PlugQuery1039.exed

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: 5.zip

[ 本帖最后由 wangjay1980 于 2007-7-7 15:21 编辑 ]

uhthn2002

VBA32 MISS

红心王子

C:\Documents and Settings\Administrator\桌面\毒.r
ar>>bind_50119.exe   Trojan.DL.Win32.Agent.wkq（2个）
C:\Documents and Settings\Administrator\桌面\毒.r
ar>>dodolook078.exe>>$TEMP\$TEMP\1099.exe>>$TEMP\D
oSSSetup.dll       Trojan.Dodolook.r（2个）

剑指七星

卡7只报一个   
已删除: 广告程序 not-a-virus:AdWare.Win32.BHO.av        文件: F:\毒.rar/ad341.exe//stream//data0001

镭风

诺顿只报了一个。。。。

风雪

费尔两个一个木马一个广告。

F-Secure

驱逐舰杀4个，再发一个过咖啡的。