[MD5: 728838 1E4BE6 F028A7]

显示全部楼层 · 发表于 2007-7-30 11:18:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Tonger2003.zip'
C:\Documents and Settings\Administrator\桌面\
  Tonger2003.zip
[0] Archive type: ZIP
--> s168.exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
      [WARNING] Infected files in archives cannot be repaired!
--> 1.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '471b58fc.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-30 11:18:43

不杀

显示全部楼层 · 发表于 2007-7-30 11:19:35

C:\ABC\Tonger2003.zip:\s168.exe - 特征码 'Virus.Win32.AutoRun.bk' 被发现
C:\ABC\Tonger2003.zip:\1.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Tonger2003.zip:\2.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Tonger2003.zip

显示全部楼层 · 发表于 2007-7-30 11:22:28

C:\virus\s168.exe - infected with Win32.HLLW.Autoruner.175
C:\virus\1.exe - probably infected with MULDROP.Trojan
C:\virus\2.exe - probably infected with MULDROP.Trojan

显示全部楼层 · 发表于 2007-7-30 11:25:01

杀1个

显示全部楼层 · 发表于 2007-7-30 12:16:33

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9ZJO5KCR\Tonger2003[1].zip\s168.exe - infected with Win32.HLLW.Autoruner.175
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9ZJO5KCR\Tonger2003[1].zip\1.exe - probably infected with MULDROP.Trojan
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9ZJO5KCR\Tonger2003[1].zip\2.exe - probably infected with MULDROP.Trojan

Archive contains 3 infected items

显示全部楼层 · 发表于 2007-7-30 12:41:07

fscs pass

显示全部楼层 · 发表于 2007-7-30 12:43:03

原帖由 promised 于 2007-7-30 11:19 发表
Downloader.Win32.Zlob.and

ik甚是喜欢报这个

显示全部楼层 · 发表于 2007-7-30 13:11:21

扫描开始时间: 2007-7-30 13:11:00
扫描日志
NOD32 版本 2428 (20070730) NT
命令行: F:\virus\Tonger2003.zip

日期: 2007年7月30日时间: 13:11:01
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\Tonger2003.zip
F:\virus\Tonger2003.zip ?ZIP ?s168.exe<病毒 - Win32/PSW.OnLineGames.NBR 木马变种>
F:\virus\Tonger2003.zip ?ZIP ?1.exe<病毒 - 可能是 Win32/PSW.Agent.NDP 木马变种>
F:\virus\Tonger2003.zip ?ZIP ?2.exe<病毒 - 可能是 Win32/PSW.Agent.NDP 木马变种>
已扫描文件数量: 3
已发现病毒数量: 3
完成时间: 13:11:01 总共扫描时间: 0 秒 (00:00:00)

[病毒样本] [MD5: 728838 1E4BE6 F028A7]

本帖子中包含更多资源

本帖子中包含更多资源