ad[MD5: ED5664 0E0E22 FDAB67 0682D2 BB4E9D]

显示全部楼层 · 发表于 2007-8-9 13:11:56

5个ad

Win32:Boran-M [Adw]  |  psli.dll
Win32:Boran-N [Adw]  |  runk.dll
Win32:Boran-N [Adw]  | mpif.dll

显示全部楼层 · 发表于 2007-8-9 13:12:13

风暴胜者V2 贺岁精简网络版本
_________您的安全是我们的责任_______________
作者：Sanhuan222@163.com TM:469428271
个人Blog：http://hi.baidu.com/迅者/

===============================================
___________病毒查杀结果__________________

===============================================
2007年5月9日13时12分54秒开始查杀C:\Documents and Settings\Administrator\桌面\virus\新建文件夹 (3)
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\新建文件夹 (3)\ileb.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\新建文件夹 (3)\mpif.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\新建文件夹 (3)\psli.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\新建文件夹 (3)\runk.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\新建文件夹 (3)\uxqn.dll
****************************
您应该引起注意的文件:
-----------------------------------------

=========================================
_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------
2007年5月9日13时12分54秒收起线程…100% 查杀完毕！
扫描文件：5查杀病毒：5

显示全部楼层 · 发表于 2007-8-9 13:13:08

--> uxqn.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
--> ileb.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.AM.1
      [WARNING] Infected files in archives cannot be repaired!
--> mpif.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.AM
      [WARNING] Infected files in archives cannot be repaired!
--> psli.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
--> runk.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '4733a2a1.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-9 13:13:50

kv all pass

显示全部楼层 · 发表于 2007-8-9 13:14:25

已检测到: 广告软件 not-a-virus:AdWare.Win32.Boran.am 文件: G:\样本\cfyv\uxqn.dll
已检测到: 广告软件 not-a-virus:AdWare.Win32.Boran.am 文件: G:\样本\cfyv\ileb.dll
已检测到: 广告软件 not-a-virus:AdWare.Win32.Boran.am 文件: G:\样本\cfyv\mpif.dll
已检测到: 广告软件 not-a-virus:AdWare.Win32.Boran.am 文件: G:\样本\cfyv\psli.dll
已检测到: 广告软件 not-a-virus:AdWare.Win32.Boran.am 文件: G:\样本\cfyv\runk.dll

显示全部楼层 · 发表于 2007-8-9 13:15:33

Scan performed at: 2007-8-9 13:15:17
Scanning Log
NOD32 version 2445 (20070808) NT
Command line: C:\Documents and Settings\EQ2\桌面\cfyv.rar
Operating memory - is OK

Date: 9.8.2007 Time: 13:15:23
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\cfyv.rar
C:\Documents and Settings\EQ2\桌面\cfyv.rar ?RAR ?uxqn.dll - Win32/Adware.Boran application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\cfyv.rar ?RAR ?ileb.dll - Win32/Adware.Boran application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\cfyv.rar ?RAR ?mpif.dll - Win32/Adware.Boran application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\cfyv.rar ?RAR ?psli.dll - Win32/Adware.Boran application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\cfyv.rar ?RAR ?runk.dll - Win32/Adware.Boran application - was a part of the deleted object
Number of scanned files: 6
Number of threats found: 5
Number of files cleaned: 1
Time of completion: 13:15:23 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-8-9 13:29:54

金山，费尔都是5个

显示全部楼层 · 发表于 2007-8-9 13:50:36

驱逐舰全报

显示全部楼层 · 发表于 2007-8-9 15:08:22

vba32

显示全部楼层 · 发表于 2007-8-9 16:39:27

发现风险！风险： Adware.Borlan 位于文件：C:\Documents and Settings\Administrator\桌面\Virus样本\cfyv.rar>>uxqn.dll 由：手动扫描。操作：隔离成功。操作说明：已经成功地隔离了文件。

发现风险！风险： Adware.Borlan 位于文件：C:\Documents and Settings\Administrator\桌面\Virus样本\cfyv.rar>>ileb.dll 由：手动扫描。操作：隔离成功。操作说明：已经成功地隔离了文件。

发现风险！风险： Adware.Borlan 位于文件：C:\Documents and Settings\Administrator\桌面\Virus样本\cfyv.rar>>mpif.dll 由：手动扫描。操作：隔离成功。操作说明：已经成功地隔离了文件。

发现风险！风险： Adware.Borlan 位于文件：C:\Documents and Settings\Administrator\桌面\Virus样本\cfyv.rar>>psli.dll 由：手动扫描。操作：隔离成功。操作说明：已经成功地隔离了文件。

发现风险！风险： Adware.Borlan 位于文件：C:\Documents and Settings\Administrator\桌面\Virus样本\cfyv.rar>>runk.dll 由：手动扫描。操作：隔离成功。操作说明：已经成功地隔离了文件。

[病毒样本] ad[MD5: ED5664 0E0E22 FDAB67 0682D2 BB4E9D]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源