[MD5: 7427A6 CA1D00 1E01E4 45CE73 9DB963 ADE771]机子不幸中弹

qianwenxiang

[MD5: 7427A6 CA1D00 1E01E4 45CE73 9DB963 ADE771]

1688388728

扫描进行于：2007-8-21 20:10:54
扫描日志
NOD32版本 2472 (20070821) NT
命令行： D:\病毒库\082101.rar

日期： 21.8.2007  时间：20:10:58
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\病毒库\082101.rar
D:\病毒库\082101.rar >>RAR >>msdebug.dll - Win32/Agent.NIK 木马的变种
D:\病毒库\082101.rar >>RAR >>netsrvcs.dll - Win32/Agent.NIK 木马的变种
D:\病毒库\082101.rar >>RAR >>gmin.exe - Win32/TrojanDownloader.Delf.BHO 木马
D:\病毒库\082101.rar >>RAR >>windhcp.ocx - Win32/Agent.NIK 木马的变种
D:\病毒库\082101.rar >>RAR >>Gserv.dll - Win32/Agent.NIK 木马的变种
已扫描的文件数目：8
已发现的病毒数目：5
活动的病毒数目：1
完成时间： 20:11:00 总扫描时间：2 秒 (00:00:02)

tracydk

FBAV

为PC护航风暴微塔
_____________________________________________
                                          
             风暴微塔反间谋
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]              
                            [内测版]      
                   http://www.v0day.com/  
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\082101\gmin.exe]
                    …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\082101\gmin.exe]
                    …………引擎[2]发现病毒:Win32.NkHack.okpack.reloc
文件数:4   病毒数:2  比重:0.5
OK  扫描完毕！ en

wangjay1980

detected: Trojan program Trojan.Win32.Agent.abf        File: C:\Documents and Settings\Owner\×ÀÃæ\082101.rar/CelInDriver.sys
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\082101.rar/msdebug.dll//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\082101.rar/netsrvcs.dll//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Downloader.Win32.Delf.bko        File: C:\Documents and Settings\Owner\×ÀÃæ\082101.rar/gmin.exe//hmimys
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\082101.rar/windhcp.ocx//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\082101.rar/Gserv.dll//PE_Patch.PECompact//PecBundle//PECompact

Nerazzurri

Starting the file scan:

Begin scan in 'F:\Documents and Settings\simasc\桌面\082101.rar'
F:\Documents and Settings\simasc\桌面\082101.rar
  [0] Archive type: RAR
  --> CelInDriver.sys
      [DETECTION] Is the Trojan horse TR/Agent.abf.1090
  --> msdebug.dll
      [DETECTION] Is the Trojan horse TR/Proxy.Small.DU.1247
  --> netsrvcs.dll
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> gmin.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> windhcp.ocx
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> Gserv.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Gordon
      [INFO]      The file was deleted!

ccw8642

FS全灭！

seamonkey

Rising08:
D:\082101.rar>>CelInDriver.sys/RootKit.Win32.Cell.d
D:\082101.rar>>msdebug.dll>>pecompact2x/Trojan.PSW.Win32.OnlineGames.ctp
D:\082101.rar>>netsrvcs.dll>>pecompact2x-a/Trojan.PSW.Win32.OnlineGames.cf
D:\082101.rar>>gmin.exe>>himemys/Worm.Agent.xk
D:\082101.rar>>windhcp.ocx>>pecompact2x-a/Trojan.PSW.Win32.OnlineGames.ce
D:\082101.rar>>Gserv.dll>>pecompact2x-a/Trojan.Win32.Agent.idd

碧水寒潭

Start of the scan: 2007年8月21日  20:29

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\082101.rar
  [0] Archive type: RAR
  --> CelInDriver.sys
      [DETECTION] Is the Trojan horse TR/Agent.abf.1090
  --> msdebug.dll
      [DETECTION] Is the Trojan horse TR/Proxy.Small.DU.1247
  --> netsrvcs.dll
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> gmin.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> windhcp.ocx
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> Gserv.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Gordon
      [INFO]      The file was deleted!


End of the scan: 2007年8月21日  20:29
Used time: 00:12 min

The scan has been done completely.

      1 Scanning directories
      7 Files were scanned
      6 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

tracydk