一小包5个!

欠妳緈諨

貌似有2个广告

1688388728

检测到：广告程序 not-a-virus:AdWare.Win32.Boran.bg        URL: http://bbs.kafan.cn/attachment.p ... e//stream//data0001

king6808

已删除：广告程序 not-a-virus:AdWare.Win32.Boran.bg 文件　: G:\Temp\5ge.rar/103016.exe//stream//data0001
已删除：木马程序 Trojan-Downloader.Win32.QQHelper.aes 文件　: G:\Temp\5ge.rar/103017.exe
已删除：广告程序 not-a-virus:AdWare.Win32.Cinmus.po 文件　: G:\Temp\5ge.rar/103018.exe//stream//data0002//data0001


[ 本帖最后由 king6808 于 2007-9-21 22:03 编辑 ]

FBAV

MicroVita AntiSpyware  
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\5ge\103019.exe]
                    …………发现Spy！报告:[1]
文件信息:  大小:74519  MD5:833211e3e8ca94027c5ef4e48706ecf4


文件数:5   病毒数:1  比重:0.2
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Lineage.mug   
病毒： Trojan.DL.Win32.Agent.yhc

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.41.42

残缺的唯美

D:\Documents and Settings\EKINCHENG\桌面\5ge.rar » RAR » 103018.exe » NSIS » 1701.exe - a variant of Win32/Adware.Cinmus application
D:\Documents and Settings\EKINCHENG\桌面\5ge.rar » RAR » 103018.exe » NSIS » 1701.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
D:\Documents and Settings\EKINCHENG\桌面\5ge.rar » RAR » 103017.exe - Win32/TrojanDownloader.QQHelper.NDO trojan
D:\Documents and Settings\EKINCHENG\桌面\5ge.rar » RAR » 2003.exe - a variant of Win32/PSW.Lineage.ACN trojan
D:\Documents and Settings\EKINCHENG\桌面\5ge.rar » RAR » 103019.exe - probably a variant of Win32/Agent.AAC trojan
D:\Documents and Settings\EKINCHENG\桌面\5ge.rar - multiple threats - deleted - quarantined
D:\Documents and Settings\EKINCHENG\桌面\5ge.rar » RAR » 103018.exe - a variant of Win32/Adware.Cinmus application

The EQs

Scan performed at: 2007-9-21 22:11:24
Scanning Log
NOD32 version 2543 (20070921) NT
Command line: C:\Documents and Settings\Don johnson\桌面\5ge.rar
Operating memory - is OK

Date: 21.9.2007  Time: 22:11:27
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\5ge.rar
C:\Documents and Settings\Don johnson\桌面\5ge.rar ?RAR ?103019.exe - probably a variant of Win32/Agent.AAC trojan
C:\Documents and Settings\Don johnson\桌面\5ge.rar ?RAR ?2003.exe - a variant of Win32/PSW.Lineage.ACN trojan
C:\Documents and Settings\Don johnson\桌面\5ge.rar ?RAR ?103017.exe - Win32/TrojanDownloader.QQHelper.NDO trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\5ge.rar ?RAR ?103018.exe ?NSIS ?1701.exe ?NSIS ?acpidisk.sys - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
Number of scanned files: 15
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 22:11:29 Total scanning time: 2 sec (00:00:02)

mox

只是添加了一个服务而已

欠妳緈諨

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\5ge.rar'
C:\Documents and Settings\Administrator\My Documents\
  5ge.rar
    [0] Archive type: RAR
    --> 103019.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2003.exe
        [DETECTION] Is the Trojan horse TR/PWS.Lineage.ZQ.3
        [WARNING]   Infected files in archives cannot be repaired!
    --> 103016.exe
        [DETECTION] Contains detection pattern of the dropper DR/Boran.BG
        [WARNING]   Infected files in archives cannot be repaired!
    --> 103017.exe
        [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.aes
        [WARNING]   Infected files in archives cannot be repaired!
    --> 103018.exe
        [WARNING]   The file was ignored!


End of the scan: 2007年9月21日  08:04
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      5 Warnings
      0 Notes