13

qianwenxiang

CLAMWIN出马，居然还找到4个
C:\TDDOWNLOAD\execute\新建文件夹\bio_axel.doc: W97M.Locale.B FOUND
C:\TDDOWNLOAD\execute\新建文件夹\fw.htm: Exploit.Iframe-1 FOUND
C:\TDDOWNLOAD\execute\新建文件夹\index(103).html: Exploit.Iframe-1 FOUND
C:\TDDOWNLOAD\execute\新建文件夹\index1.asp: Trojan.Clicker.HTML.IFrame FOUND


熊猫跟eset的在线扫描控件下载速度好慢..

FBAV

外国货……

[ 本帖最后由 FBAV 于 2007-10-2 18:07 编辑 ]

Nerazzurri

扫描进行于：2007-10-2 18:06:17
扫描日志
NOD32版本 2565 (20071002) NT
命令行： F:\Documents and Settings\kafan\桌面\13.rar

日期： 2.10.2007  时间：18:06:19
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\kafan\桌面\13.rar
F:\Documents and Settings\kafan\桌面\13.rar >>RAR >>besplatni-pornici.html.VIR - HTML/TrojanDownloader.XXXToolbar Adware
F:\Documents and Settings\kafan\桌面\13.rar >>RAR >>index(95).html.VIR - HTML/TrojanDownloader.XXXToolbar Adware
F:\Documents and Settings\kafan\桌面\13.rar >>RAR >>bio_axel.doc - W97M/Locale.A 病毒
已扫描的文件数目：13
已发现的病毒数目：3
完成时间： 18:06:49 总扫描时间：30 秒 (00:00:30)

========================
Starting the file scan:

Begin scan in 'F:\Documents and Settings\kafan\桌面\13.rar'
F:\Documents and Settings\kafan\桌面\13.rar
  [0] Archive type: RAR
  --> bbpkbwem.php.VIR
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> index(100).html.vir
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> index(128).html.vir
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> syvscc.php.VIR
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> index1.asp
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> index(103).html
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> bio_axel.doc
      [DETECTION] Contains code of the Word macro virus W97M/Locale.A
      [INFO]      The file was deleted!

The EQs

Scan performed at: 2007-10-2 18:07:31
Scanning Log
NOD32 version 2565 (20071002) NT
Command line: C:\Documents and Settings\Don johnson\桌面\13.rar
Operating memory - is OK

Date: 2.10.2007  Time: 18:07:34
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\13.rar
C:\Documents and Settings\Don johnson\桌面\13.rar ?RAR ?besplatni-pornici.html.VIR - HTML/TrojanDownloader.XXXToolbar Adware - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\13.rar ?RAR ?index(95).html.VIR - HTML/TrojanDownloader.XXXToolbar Adware - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\13.rar ?RAR ?bio_axel.doc - W97M/Locale.A virus - was a part of the deleted object
Number of scanned files: 14
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 18:07:49 Total scanning time: 15 sec (00:00:15)

woai_jolin

===================================================================================================
On-demand scanner 7.0.0.9

NSE revision 5.91.07
nvcbin.def revision 5.90.00 of 2007/09/28 15:46:54 (967863 variants)
nvcmacro.def revision 5.90.00 of 2007/09/25 15:36:51 (20411 variants)
Total number of variants: 988274
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: G:\
- Scanning system areas of drive: G:\
- Scanning files in the directory: G:\v\
        0 ms G:\v\alt_energ_raschet_okupaem.xls                          
     12375 ms G:\v\bbpkbwem.php.VIR                                       
        0 ms G:\v\besplatni-pornici.html.VIR                             
        0 ms G:\v\bio_axel.doc                                            Virus W97M/Locale.A ()
- File G:\v\bio_axel.doc quarantined. Virus W97M/Locale.A ()
- File G:\v\bio_axel.doc deleted.
       16 ms G:\v\fw.htm                                                
       16 ms G:\v\index(100).html.VIR                                    
       62 ms G:\v\index(103).html                                       
       16 ms G:\v\index(106).html.VIR                                    
       47 ms G:\v\index(128).html.VIR                                    
        0 ms G:\v\index(31).html.VIR                                    
       15 ms G:\v\index(95).html.VIR                                      Trojan JS/Istbar.A ()
- File G:\v\index(95).html.VIR quarantined.
- File G:\v\index(95).html.VIR deleted.
       16 ms G:\v\index1.asp                                             
     12140 ms G:\v\syvscc.php.VIR                                         

===================================================================================================

The scanning started: 2007/10/02 18:09:07
               ended: 2007/10/02 18:09:32
Logged on as        : Administrator
on hostname         : C3EF58622174424

Scanning results:
   Total number of files found..............................:      13
   Number of files scanned..................................:      13
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       0
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       2

Copyright (c) 1993-2005 Norman ASA.

promised

C:\ABC\13\alt_energ_raschet_okupaem.xls
C:\ABC\13\bbpkbwem.php.VIR
C:\ABC\13\besplatni-pornici.html.VIR
C:\ABC\13\bio_axel.doc - 特征码 'Virus.MSWord.Thus.AA' 被发现
C:\ABC\13\fw.htm
C:\ABC\13\index(100).html.VIR
C:\ABC\13\index(103).html
C:\ABC\13\index(106).html.VIR
C:\ABC\13\index(128).html.VIR
C:\ABC\13\index(31).html.VIR
C:\ABC\13\index(95).html.VIR
C:\ABC\13\index1.asp - 特征码 'Trojan.Fujif.F' 被发现
C:\ABC\13\syvscc.php.VIR

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Exploit.HTML.Mht.p      
病毒： Trojan.DL.IeFrame.by     

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.43.10

king6808

上报去

freely

咖啡 杀出来2个

duandxxi

费尔杀6个