windows目录下的奇怪东东[MD5: A47EB7 D41D8C 21FEB2 00FECA 51154E 3B905F CFD019]

显示全部楼层 · 发表于 2007-7-16 11:22:16

病毒名称                      处理结果发现日期       扫描方式          路径                                                                                                                   文件                                                                                                                   病毒来源
Trojan.PSW.Win32.WoWar.sh    忽略       2007-07-16 11:21  快捷扫描          C:\Documents and Settings\Administrator\桌面                                                                         样本.rar>>样本\winow.exe>>upack0.34                                                                                  本机
Adware.Win32.Dodolook.d       忽略       2007-07-16 11:21  快捷扫描          C:\Documents and Settings\Administrator\桌面                                                                         样本.rar>>样本\dodolook386.exe>>$TEMP\$TEMP\1247.exe>>$TEMP\DoSSSetup.dll                                              本机
Adware.Win32.Dodolook.d       忽略       2007-07-16 11:21  快捷扫描          C:\Documents and Settings\Administrator\桌面                                                                         样本.rar>>样本\dodolook386.exe>>$TEMP\$TEMP\1247.exe>>$TEMP\acpidisk.sys                                              本机
Trojan.PSW.Win32.WoWar.sh    忽略       2007-07-16 11:21  快捷扫描          C:\Documents and Settings\Administrator\桌面                                                                         样本.rar>>样本\dwow713.exe>>upack0.34                                                                                  本机
Trojan.PSW.Win32.QQPass.qml    忽略       2007-07-16 11:21  快捷扫描          C:\Documents and Settings\Administrator\桌面                                                                         样本.rar>>样本\kurui.exe>>upx_c                                                                                        本机

显示全部楼层 · 发表于 2007-7-16 12:08:23

1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\dgj713.exe,Manual scan
1184558961,2007-7-16 12:09:21,Trojan.Cinmeng.wgcz.arc,木马,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\dodolook386.exe,Manual scan
1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\drx713.exe,Manual scan
1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\dwow713.exe,Manual scan
1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\dzx713.exe,Manual scan
1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\kulionrx.exe,Manual scan
1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\kulionzx.exe,Manual scan
1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\winow.exe,Manual scan
1184558961,2007-7-16 12:09:21,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\样本3.rar>>样本\wmsj.exe,Manual scan
费尔

显示全部楼层 · 发表于 2007-7-16 14:03:41

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/13 18:54:26 (807131 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 827472
Command line: "@C:\Users\Jason\AppData\Local\Temp\~ODF41A.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: D:\v\v\样本\
   47 ms D:\v\v\样本\dgj713.exe                                     Security Risk W32/Suspicious_U.gen ()
   1672 ms D:\v\v\样本\dodolook386.exe
   16 ms D:\v\v\样本\drx713.exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms D:\v\v\样本\dwow713.exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms D:\v\v\样本\dzx713.exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms D:\v\v\样本\kulionrx.exe                                  Security Risk W32/Suspicious_U.gen ()
      0 ms D:\v\v\样本\kulionzx.exe                                  Security Risk W32/Suspicious_U.gen ()
   203 ms D:\v\v\样本\kurui.exe
      0 ms D:\v\v\样本\winow.exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms D:\v\v\样本\wmsj.exe                                        Security Risk W32/Suspicious_U.gen ()
- File D:\v\v\样本\dgj713.exe quarantined.
- File D:\v\v\样本\dgj713.exe deleted.
- File D:\v\v\样本\drx713.exe quarantined.
- File D:\v\v\样本\drx713.exe deleted.
- File D:\v\v\样本\dwow713.exe quarantined.
- File D:\v\v\样本\dwow713.exe deleted.
- File D:\v\v\样本\dzx713.exe quarantined.
- File D:\v\v\样本\dzx713.exe deleted.
- File D:\v\v\样本\kulionrx.exe quarantined.
- File D:\v\v\样本\kulionrx.exe deleted.
- File D:\v\v\样本\kulionzx.exe quarantined.
- File D:\v\v\样本\kulionzx.exe deleted.
- File D:\v\v\样本\winow.exe quarantined.
- File D:\v\v\样本\winow.exe deleted.
- File D:\v\v\样本\wmsj.exe quarantined.
- File D:\v\v\样本\wmsj.exe deleted.

===================================================================================================

The scanning started: 2007/07/16 13:52:20
            ended: 2007/07/16 13:52:24
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    10
Number of files scanned..................................:    10
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0