[MD5: A08E99]

红心王子

promised

C:\ABC\启动报毒\1111\eAPI.fne - 特征码 'Backdoor.Pigeon.1604' 被发现
C:\ABC\启动报毒\1111\GLIEDown2.dll - 特征码 'Backdoor.Win32.IeDown' 被发现
C:\ABC\启动报毒\1111\ha[1].htm
C:\ABC\启动报毒\1111\leftup.dll
C:\ABC\启动报毒\1111\QQservice.dll - 特征码 'Trojan.Win32.BHO.e' 被发现
C:\ABC\启动报毒\1111\termsv.exe - 特征码 'Trojan-Downloader.Win32.Delf.ago' 被发现

        6 个文件被扫描
          (0 个压缩档 0 个文件)
        4 个特征码被侦测
        0 个可疑代码段被发现
        耗时: 0:00.172

xxwpk007

nod pass

wangjay1980

detected: Trojan program Trojan-Downloader.VBS.Small.bv        File: C:\Documents and Settings\Owner\×ÀÃæ\Æô¶¯±¨¶¾.rar/1111\ha[1].htm
detected: Trojan program Trojan-Spy.Win32.Delf.ul        File: C:\Documents and Settings\Owner\×ÀÃæ\Æô¶¯±¨¶¾.rar/1111\QQservice.dll
detected: Trojan program Trojan-Downloader.Win32.Delf.ago        File: C:\Documents and Settings\Owner\×ÀÃæ\Æô¶¯±¨¶¾.rar/1111\termsv.exe

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\启动报毒.rar'
F:\病毒样本\启动报毒.rar
  [0] Archive type: RAR
  --> 1111\eAPI.fne
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1111\GLIEDown2.dll
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Iedown.B Backdoor server programs
  --> 1111\ha[1].htm
      [DETECTION] Contains signature of the VBS script virus VBS/Dldr.Agent.6171
  --> 1111\leftup.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1111\QQservice.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.ago.30
  --> 1111\termsv.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.ago.30
      [INFO]      The file was deleted!

woai_jolin

norman all pass

zzm3145

Pass

蓝色牛仔裤

既然驱逐舰来了，蜘蛛也应该露露脸了。。
不过只扫到2个。。


[Scan path] C:\Documents and Settings\Administrator\桌面\启动报毒.rar
>C:\Documents and Settings\Administrator\桌面\启动报毒.rar\1111\eAPI.fne - Ok
>C:\Documents and Settings\Administrator\桌面\启动报毒.rar\1111\GLIEDown2.dll - Ok
>>C:\Documents and Settings\Administrator\桌面\启动报毒.rar\1111\ha[1].htm\VBScript.0 - Ok
>C:\Documents and Settings\Administrator\桌面\启动报毒.rar\1111\ha[1].htm - Ok
>C:\Documents and Settings\Administrator\桌面\启动报毒.rar\1111\leftup.dll - Ok
>>C:\Documents and Settings\Administrator\桌面\启动报毒.rar\1111\QQservice.dll infected with Trojan.DownLoader.origin
>C:\Documents and Settings\Administrator\桌面\启动报毒.rar\1111\termsv.exe infected with Trojan.DownLoader.origin
C:\Documents and Settings\Administrator\桌面\启动报毒.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 8
Infected objects found: 2
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 2001 Kb/s
Scan time: 00:00:01

红心王子

原帖由 蓝色牛仔裤 于 2007-7-16 19:06 发表
既然驱逐舰来了，蜘蛛也应该露露脸了。。
不过只扫到2个。。


[Scan path] C:\Documents and Settings\Administrator\桌面\启动报毒.rar
>C:\Documents and Settings\Administrator\桌面\启动报毒 ...

蜘蛛漏掉一个

蓝色牛仔裤

哦？我更新看看，不过htm蜘蛛是漏定了。