12个广告

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\1002Adware'
C:\Users\morgan\Documents\1002Adware\
  00110.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.mvz
      [INFO]      The file was deleted!
  1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Baser.W.2
      [INFO]      The file was deleted!
  Abasetup.exe
  barhelp24.0.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/IEBar.N
      [INFO]      The file was deleted!
  Direcpll.dll
  diybar2.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bar.Diybar.B
      [INFO]      The file was deleted!
  EGDACCESS_1064.dll
      [DETECTION] Contains detection pattern of the dial-up program DIAL/EDGACCESS.5
      [INFO]      The file was deleted!
  hbinstie.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Hotbar.AY.5
      [INFO]      The file was deleted!
  iebar23.0.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/IEBar.M.1
      [INFO]      The file was deleted!
  siinstaller.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Comet.c.1.B
      [INFO]      The file was deleted!
  tbhelper.dll
  x8Setp.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/x8Bar.1
      [INFO]      The file was deleted!


End of the scan: 2007年10月1日  22:43
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     12 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      9 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

promised

C:\ABC\1002Adware\00110.dll
C:\ABC\1002Adware\1.exe - 特征码 'Trojan-PWS.Win32.QQPass.pb' 被发现
C:\ABC\1002Adware\Abasetup.exe
C:\ABC\1002Adware\barhelp24.0.dll - 特征码 'not-a-virus:AdWare.Win32.Iebar.h' 被发现
C:\ABC\1002Adware\Direcpll.dll - 可疑代码段 被发现 (Level: 95)
C:\ABC\1002Adware\diybar2.dll - 特征码 'not-a-virus:AdWare.Win32.Diybar.b' 被发现
C:\ABC\1002Adware\EGDACCESS_1064.dll - 特征码 'not-a-virus:Porn-Dialer.Win32.InstantAccess.f' 被发现
C:\ABC\1002Adware\hbinstie.dll - 特征码 'not-a-virus:AdWare.Win32.HotBar.bj' 被发现
C:\ABC\1002Adware\iebar23.0.dll - 特征码 'not-a-virus:AdWare.Win32.Iebar.m' 被发现
C:\ABC\1002Adware\siinstaller.exe - 特征码 'not-a-virus:AdWare.Win32.Comet.c' 被发现
C:\ABC\1002Adware\tbhelper.dll
C:\ABC\1002Adware\x8Setp.exe - 特征码 'not-a-virus:AdWare.Win32.Excite.a' 被发现

红心王子

2007-10-2        15:33:03        1191310383        Administrator        3716        Sign of "Win32:Delf-FVX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part1.rar\1.exe\[UPX]" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part2.rar\barhelp24.0.dll" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part2.rar\diybar2.dll" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Dialer-gen. [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part2.rar\EGDACCESS_1064.dll" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part2.rar\hbinstie.dll" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part3.rar\iebar23.0.dll" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part3.rar\siinstaller.exe\$INSTDIR\ScreensaversInst.dll" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part3.rar\siinstaller.exe" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Spyware-gen. [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part3.rar\x8Setp.exe\[Embedded#04110]" file.  
2007-10-2        15:33:09        1191310389        Administrator        3716        Sign of "Win32:Spyware-gen. [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\1002Adware[1].part3.rar\x8Setp.exe" file.

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.IEbar.b           
病毒： Trojan.IEbar.c           
病毒： Trojan.Clicker.EGDAccess.a

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.43.10

king6808

已删除：木马程序 Trojan-Downloader.Win32.Baser.w        文件: F:\10.2\1002Adware.rar/1002Adware\1.exe//PE_Patch.UPX//UPX
已删除：广告程序 not-a-virus:AdWare.Win32.Mostofate.ar        文件: F:\10.2\1002Adware.rar/1002Adware\00110.dll
已删除：广告程序 not-a-virus:AdWare.Win32.Iebar.h        文件: F:\10.2\1002Adware.rar/1002Adware\barhelp24.0.dll
已删除：广告程序 not-a-virus:AdWare.Win32.Diybar.b        文件: F:\10.2\1002Adware.rar/1002Adware\diybar2.dll
已删除：色情软件 not-a-virus:Porn-Dialer.Win32.InstantAccess.f        文件: F:\10.2\1002Adware.rar/1002Adware\EGDACCESS_1064.dll//UPX
已删除：广告程序 not-a-virus:AdWare.Win32.HotBar.bj        文件: F:\10.2\1002Adware.rar/1002Adware\hbinstie.dll
已删除：广告程序 not-a-virus:AdWare.Win32.Iebar.m        文件: F:\10.2\1002Adware.rar/1002Adware\iebar23.0.dll
已删除：广告程序 not-a-virus:AdWare.Win32.Comet.c        文件: F:\10.2\1002Adware.rar/1002Adware\siinstaller.exe//data0002
已删除：广告程序 not-a-virus:AdWare.Win32.Excite.a        文件: F:\10.2\1002Adware.rar/1002Adware\x8Setp.exe

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 282
Paranoia Database - 6361
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\1.exe - Infected with PDB:Win32.536 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\00110.dll - Infected with PDB:b37 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Abasetup.exe - Infected with SDB:Trojan.vb.a - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\barhelp24.0.dll - Infected with PDB:d7b Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Direcpll.dll - Infected with PDB:Win32.ba3 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\diybar2.dll - Infected with PDB:29a Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\EGDACCESS_1064.dll - Infected with PDB:dc7 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\hbinstie.dll - Infected with PDB:7c1 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\iebar23.0.dll - Infected with PDB:dbc Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\siinstaller.exe - Infected with PDB:825 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\tbhelper.dll - Infected with PDB:ba8 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\x8Setp.exe - Infected with PDB:0b2 Malware program - Deleted

12 Files scanned
12 Infected files found
0 Suspicious files found
0 Files cured
12 Files deleted

碧水寒潭

Start of the scan: 2007年10月3日  09:46

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\1002Adware[1].part1.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Baser.W.2
  --> 00110.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.mvz
      [INFO]      The file was deleted!
H:\AV-TEST\1002Adware[1].part2.rar
  [0] Archive type: RAR
  --> barhelp24.0.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/IEBar.N
  --> diybar2.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bar.Diybar.B
  --> EGDACCESS_1064.dll
      [DETECTION] Contains detection pattern of the dial-up program DIAL/EDGACCESS.5
      [INFO]      The file was deleted!
H:\AV-TEST\1002Adware[1].part3.rar
  [0] Archive type: RAR
  --> iebar23.0.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/IEBar.M.1
  --> siinstaller.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Comet.c.1.B
  --> x8Setp.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/x8Bar.1
      [INFO]      The file was deleted!


End of the scan: 2007年10月3日  09:47
Used time: 00:21 min

The scan has been done completely.

      1 Scanning directories
     13 Files were scanned
      8 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      3 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      3 Archives were scanned
      0 Warnings
      0 Notes

woai_jolin

扫描报告
2007年10月4日 8:28:44 - 8:28:45
计算机名称: C3EF58622174424
扫描类型: 扫描目标
目标: G:\v


--------------------------------------------------------------------------------

结果: 找到 10 恶意软件
AdWare.Win32.Iebar.h (adware)
G:\v\barhelp24.0.dll
AdWare.Win32.Diybar.b (adware)
G:\v\diybar2.dll
Porn-Dialer.Win32.InstantAccess.f (pornware)
G:\v\EGDACCESS_1064.dll
AdWare.Win32.HotBar.bj (adware)
G:\v\hbinstie.dll
AdWare.Win32.Iebar.m (adware)
G:\v\iebar23.0.dll
AdWare.Win32.Comet.c (adware)
G:\v\siinstaller.exe
AdWare.Win32.Mostofate.av (adware)
G:\v\tbhelper.dll
AdWare.Win32.Excite.a (adware)
G:\v\x8Setp.exe
Trojan-Downloader.Win32.Baser.w (病毒)
G:\v\1.exe 操作: 已重命名
AdWare.Win32.Mostofate (adware)
G:\v\00110.dll 操作: 已隔离




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 12
未扫描: 0
结果:
病毒: 1
间谍软件: 9
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 1
删除: 0
已隔离: 1
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0


--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2007-10-03_03
间谍软件: 2007-10-03_03
扫描引擎:
F-Secure AVP: 7.00.171, 2007-10-03
F-Secure Libra: 2.04.01, 2007-10-03
F-Secure Orion: 1.02.37, 2007-10-03
F-Secure Draco: 1.00.35, 2007-09-17
扫描选项:
扫描所有文件
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问