3個

显示全部楼层 · 发表于 2007-7-8 09:42:20

c:\ABC\3.rar:\binder.exe - Suspect code-parts found (Level: 90)
c:\ABC\3.rar:\bind.exe - Suspect code-parts found (Level: 90)
c:\ABC\3.rar:\svchost.exe - Signature 'Trojan.Win32.Agent.agv' found
c:\ABC\3.rar

4 Files scanned
(1 Archiv with 3 files)
1 Signature found
2 Suspect code-parts found
Used time: 0:00.062

显示全部楼层 · 发表于 2007-7-8 09:42:42

deleted: virus Virus.Win32.AutoRun.ea File: C:\Documents and Settings\Owner\×ÀÃæ\3.rar/binder.exe
deleted: virus Virus.Win32.AutoRun.ea File: C:\Documents and Settings\Owner\×ÀÃæ\3.rar/bind.exe
deleted: Trojan program Backdoor.Win32.IRCBot.abc File: C:\Documents and Settings\Owner\×ÀÃæ\3.rar/svchost.exe

显示全部楼层 · 发表于 2007-7-8 09:50:13

C:\Documents and Settings\Administrator\桌面\3.ra
r>>binder.exe    Trojan.DL.Win32.Linis.j
C:\Documents and Settings\Administrator\桌面\3.ra
r>>bind.exe       Trojan.DL.Win32.Linis.k
C:\Documents and Settings\Administrator\桌面\3.ra
r>>svchost.exe       Backdoor.SdBot.yer

显示全部楼层 · 发表于 2007-7-8 10:06:16

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\3.rar'
C:\Documents and Settings\Administrator\桌面\
  3.rar
[0] Archive type: RAR
--> binder.exe
      [DETECTION] Is the Trojan horse TR/Dldr.ADL.12
      [WARNING] Infected files in archives cannot be repaired!
--> bind.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Qqhelper.QZ.14
      [WARNING] Infected files in archives cannot be repaired!
--> svchost.exe
      [DETECTION] Contains signature of the worm WORM/IRCBot.32068
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '470246b7.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-8 10:24:10

Scan performed at: 2007-7-8 10:23:33
Scanning Log
NOD32 version 2383 (20070706) NT
Command line: C:\Documents and Settings\wangcheng\桌面\3.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 8.7.2007 Time: 10:23:34
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\桌面\3.rar
C:\Documents and Settings\wangcheng\桌面\3.rar ?RAR ?binder.exe - a variant of Win32/TrojanDownloader.QQHelper.NCO trojan
C:\Documents and Settings\wangcheng\桌面\3.rar ?RAR ?bind.exe - Win32/TrojanDownloader.QQHelper.QZ trojan
C:\Documents and Settings\wangcheng\桌面\3.rar ?RAR ?svchost.exe - Win32/PSW.Ceda.NAB trojan
Number of scanned files: 4
Number of threats found: 3
Number of active threats: 1
Time of completion: 10:23:48 Total scanning time: 14 sec (00:00:14)

显示全部楼层 · 发表于 2007-7-8 10:25:55

Starting the file scan:

Begin scan in 'F:\病毒样本\3.rar'
F:\病毒样本\3.rar
  [0] Archive type: RAR
  --> binder.exe
   [DETECTION] Is the Trojan horse TR/Dldr.ADL.12
  --> bind.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Qqhelper.QZ.14
  --> svchost.exe
   [DETECTION] Contains signature of the worm WORM/IRCBot.32068
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-8 10:42:12

费尔3个。

显示全部楼层 · 发表于 2007-7-8 11:03:02

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Linis.j
病毒： Trojan.DL.Win32.Linis.k
病毒： Backdoor.SdBot.yer

用户来源：互联网

软件版本：19.30.52

显示全部楼层 · 发表于 2007-7-8 12:19:58

病毒: Virus.Win32.AutoRun.ea (2x), Backdoor.Win32.IRCBot.abc
文件: 3[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\ODE3GLQZ
进程: GreenBrowser.exe

3個

本帖子中包含更多资源