[MD5: A5EB43 4AE125 C879C0 00F901 3C41AD D56DDC]2+4

qianwenxiang

[MD5: A5EB43 4AE125 C879C0 00F901 3C41AD D56DDC]2+4

woai_jolin

onecare pass

红心王子

北京江民新科技术有限公司

        扫描引擎 10.00.650
        病毒库日期 2007-08-05
        更新日期 2007-08-05

扫描目标 C:\Documents and Settings\Administrator\桌面\richdll.rar

开始时间 2007-08-05 19:55:28

在 C:\Documents and Settings\Administrator\桌面\richdll.rar->RichDll.dll 中发现 Worm/Viking.atc 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :454                                 病毒体 :1         
                   删除 :1                                     解毒 :0         
    扫描速度(千字节/秒) :8757                              扫描时间 :00:00:14
    扫描文件速度(个/秒) :32

   == == ==        == == == == == ==   == == == == == ==    == == == == == ==    == == == == ==     == == == == == ==        == == ==

漏了几个 上报

微点卫士

微点:
蠕虫名称:Worm.Win32.Vikings.fqv
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\RICHDLL.DLL
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WMP11SETUP.EXE
被修改文件:
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
是否阻止文件被修改?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WMP11SETUP.EXE
木马程序生成以下文件:
1) C:\IE-BAR\IETRAY.EXE
2) C:\IE-BAR\UNINSTALL.EXE
3) C:\IEXPLORE.EXE
是否删除病毒程序及其衍生物?
不知能否运行都不能运行
费尔扫描

lsyer

--> RichDll.dll
      [DETECTION] Contains signature of the worm WORM/Viking.NCN
  --> wmp11Setup.exe
      [DETECTION] Contains suspicious code HEUR/Malware

不知能否运行  里的几个全死的~

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Win32.Worm.Viking.NCN

hj5abc

Scanned disks, folders and files: F:\richdll.rar
F:\richdll.rar ?RAR ?RichDll.dll - probably a variant of Win32/Viking virus
F:\richdll.rar ?RAR ?wmp11Setup.exe - probably unknown NewHeur_PE virus [7]

king6808

已检测: 木马程序 Trojan-PSW.Win32.OnLineGames.acb        URL: http://bbs.kafan.cn/attachment.php?aid=109505//不知能否运行.rar//host7.exe//PE_Patch//UPack

taihuxian

Malicious code found in file C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CFMZWZ87\richdll[1].rar.
Infection: Worm.Win32.Viking.lw
Action: none.

Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CFMZWZ87\richdll[1].rar\wmp11Setup.exe.
Infection: Email-Worm.Win32.generic
Action: none.

Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CFMZWZ87\richdll[1].rar\不知能否运行.rar\host7.exe.
Infection: Trojan-PSW.Win32.OnLineGames.acb
Action: none.

Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CFMZWZ87\richdll[1].rar\不知能否运行.rar\host3.exe.
Infection: Trojan.Win32.KillAV.ke
Action: none.

Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CFMZWZ87\richdll[1].rar\不知能否运行.rar\host8.exe.
Infection: Trojan.Win32.KillAV.ke
Action: none.

残缺的唯美

--> RichDll.dll
        [DETECTION] Contains signature of the worm WORM/Viking.NCN
        [WARNING]   Infected files in archives cannot be repaired!
    --> wmp11Setup.exe
    --> ²»ÖªÄÜ·ñÔËÐÐ.rar
        [1] Archive type: RAR
        --> host7.exe
        --> host1.exe
        --> host3.exe
        --> host8.exe
        [INFO]      A backup was created as '47199358.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!

看不懂了