8个[MD5: 66D15D F6CAA0 D2F88A 137D89 F3BA8F C67294 73678E BA7827]

显示全部楼层 · 发表于 2007-7-10 20:35:04

//-----------------------------------------------------------------
//
// Product: BitDefender 9 Professional Plus
// Version: 9.5
//
// 创建在: 10/07/2007 14:34:27
//
//-----------------------------------------------------------------

病毒统计

扫描路径 : D:\下载文件夹\8.rar
文件夹 : 0
文件 : 9
存档 : 1
被压缩的文件 : 0
被识别的病毒 : 6
被感染文件 : 6
警告 : 0
可疑文件 : 0
被清除过的文件 : 0
被删除的文件 : 6
已拷贝的文件 : 0
被移动的文件 : 0
被重命名的文件 : 0
I/O 错误 : 0
扫描时间 : 00:00:01
扫描速度(文件/秒) : 9

病毒定义 : 702171
扫描插件 : 16
存档插件 : 41
解压缩插件 : 6
邮件插件 : 6
系统插件 : 5
[:27:]

显示全部楼层 · 发表于 2007-7-10 20:39:42

8.rar
  [0] Archive type: RAR
  --> juexiao.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> downloader.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> dialupass.exe
   [DETECTION] Contains signature of the SPR/NSoft.PassRec.1 program
  --> skyepe.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> SkypeClient.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> mybho.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/IEBar.N
  --> bh0update.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Iebar.M.1

显示全部楼层 · 发表于 2007-7-10 20:58:20

反病毒专家 AntiVirusKit 2007 扫描病毒日志记录
版本
双引擎反病毒签名 7/10/2007
开始时间: 7/10/2007 20:56
引擎: KAV 引擎 (AVK 17.5992), AVST 引擎 (AVKB 17.292)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: bh0update.dll
路径: E:\病毒库\8
狀態: 无法清除病毒
病毒: not-a-virus:AdWare.Win32.Iebar.m (KAV 引擎), Win32:Trojan-gen. {Other} (AVST 引擎)
对象: dialupass.exe
路径: E:\病毒库\8
狀態: 无法清除病毒
病毒: not-a-virus:PSWTool.Win32.Dialupass.f (KAV 引擎)
对象: downloader.exe
路径: E:\病毒库\8
狀態: 无法清除病毒
病毒: Win32:Agent-HFX [Trj] (AVST 引擎)
对象: juexiao.exe
路径: E:\病毒库\8
狀態: 无法清除病毒
病毒: Win32:Small-GVU [Trj] (AVST 引擎)
对象: mybho.dll
路径: E:\病毒库\8
狀態: 无法清除病毒
病毒: not-a-virus:AdWare.Win32.Iebar.h (KAV 引擎), Win32:Trojan-gen. {Other} (AVST 引擎)
扫描完成: 7/10/2007 20:56
已检查 8 个文件
已发现 5 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2007-7-10 21:30:26

[Scan path] C:\Documents and Settings\Administrator\桌面\8.rar
>>C:\Documents and Settings\Administrator\桌面\8.rar\juexiao.exe infected with Trojan.DownLoader.26006
>C:\Documents and Settings\Administrator\桌面\8.rar\downloader.exe infected with BackDoor.QQChin
>>C:\Documents and Settings\Administrator\桌面\8.rar\dialupass.exe is a hacktool program Tool.DialupPass.243
>C:\Documents and Settings\Administrator\桌面\8.rar\iowrite.dll - Ok
>>C:\Documents and Settings\Administrator\桌面\8.rar\skyepe.exe - Ok
>>C:\Documents and Settings\Administrator\桌面\8.rar\SkypeClient.exe - Ok
>C:\Documents and Settings\Administrator\桌面\8.rar\mybho.dll is an adware program Adware.IEBar
>C:\Documents and Settings\Administrator\桌面\8.rar\bh0update.dll is an adware program Adware.IEBar.origin
C:\Documents and Settings\Administrator\桌面\8.rar - archive contains infected objects

显示全部楼层 · 发表于 2007-7-10 21:32:32

漏一个

SkypeClient.exe报的可以上报修正了
c:\ABC\8\bh0update.dll - Signature 'not-a-virus:AdWare.Win32.Iebar.m' found
c:\ABC\8\dialupass.exe - Signature 'not-a-virus:PSWTool.Win32.Dialupass.f' found
c:\ABC\8\downloader.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
c:\ABC\8\iowrite.dll
c:\ABC\8\juexiao.exe - Signature 'Trojan-Dropper.Win32.Djoiner.13' found
c:\ABC\8\mybho.dll - Signature 'not-a-virus:AdWare.Win32.Iebar.h' found
c:\ABC\8\skyepe.exe - Signature 'BehavesLikeWin32.ProcessHijack' found
c:\ABC\8\SkypeClient.exe

      8 Files scanned
      (0 Archives with 0 files)
      6 Signatures found
      0 Suspect code-parts found
      Used time: 0:00.313

显示全部楼层 · 发表于 2007-7-10 21:59:30

显示全部楼层 · 发表于 2007-7-11 01:31:38

红伞启发6个

显示全部楼层 · 发表于 2007-7-11 07:07:43

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Adware.Iebar.M
http://www.bitdefender.com/vfind/?q=Adware.Iebar.L
http://www.bitdefender.com/vfind/?q=Backdoor.SdBot.DESP
http://www.bitdefender.com/vfind/?q=Application.DialupPass.I
http://www.bitdefender.com/vfind ... ric.Popwin.74C0307C
http://www.bitdefender.com/vfind ... ware.dld!!.CE8940CA

[病毒样本] 8个[MD5: 66D15D F6CAA0 D2F88A 137D89 F3BA8F C67294 73678E BA7827]

本帖子中包含更多资源