继续广告 7个

显示全部楼层 · 发表于 2007-10-5 15:24:30

AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间: 15:22:47 2007-10-5

+ 扫描结果:

C:\Documents and Settings\zh\桌面\GbPluginBb.rar/albus.dll.vir -> Adware.Baidu : 已忽略.
C:\Documents and Settings\zh\桌面\GbPluginBb.rar/mmssver.dll.vir -> Adware.Boran : 已忽略.
C:\Documents and Settings\zh\桌面\GbPluginBb.rar/YazzleActiveX.ocx.vir -> Adware.MediaTickets : 已忽略.
C:\Documents and Settings\zh\桌面\GbPluginBb.rar/DrUninst.exe.vir -> Adware.nCase : 已忽略.
C:\Documents and Settings\zh\桌面\GbPluginBb.rar/istactivex.dll.vir -> Downloader.IstBar : 已忽略.
C:\Documents and Settings\zh\桌面\GbPluginBb.rar/loader.exe.vir -> Downloader.Small.on : 已忽略.

金山六个

显示全部楼层 · 发表于 2007-10-5 15:36:51

5个

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.1
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\GbPluginBb\albus.dll.vir//UPX 检测到 Generic.Binder
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\GbPluginBb\DrUninst.exe.vir 检测到 Generic.Binder
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\GbPluginBb\f3Setup1.exe.vir 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\GbPluginBb\mmssver.dll.vir 检测到 Packed.Unknown.vision
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\GbPluginBb\YazzleActiveX.ocx.vir 检测到 Generic.Binder
检测到了 5 个未知的恶意程序，请上报。
任务扫描完成。共耗费的时间：0-00-00 00:00:01:0232，共扫描的文件数量：10，共扫描到的威胁数量：5，威胁率：50%，扫描速率： 8.12 文件/秒，扫描速度： 1034.9 千字节/秒

显示全部楼层 · 发表于 2007-10-5 17:23:25

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\GbPluginBb.rar'
C:\Documents and Settings\tim\桌面\GbPluginBb.rar
  [0] Archive type: RAR
  --> YazzleActiveX.ocx.vir
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/MediaTick.W.8
  --> albus.dll.vir
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.Y.1
  --> DrUninst.exe.vir
   [DETECTION] Contains suspicious code HEUR/Malware
  --> istactivex.dll.vir
   [DETECTION] Is the Trojan horse TR/IstBar.DW
  --> loader.exe.vir
   [DETECTION] Is the Trojan horse TR/Dldr.Small.ON.2
  --> mmssver.dll.vir
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.S
   [INFO]    A backup was created as '475602df.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: Friday, 5 October, 2007  17:23
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   8 Files were scanned
   5 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-5 18:38:59

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 306
Paranoia Database - 6838
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\YazzleActiveX.ocx.vir - Infected Generic.Malware.5b1
C:\Documents and Settings\uhthn\Desktop\New Folder\albus.dll.vir - Suspected MalwareDetector:Generic.PSW.1
C:\Documents and Settings\uhthn\Desktop\New Folder\DrUninst.exe.vir - Infected Trojan.inject.1
C:\Documents and Settings\uhthn\Desktop\New Folder\f3Setup1.exe.vir - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\istactivex.dll.vir - Suspected Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\loader.exe.vir - Suspected Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\mmssver.dll.vir - Infected Adware.boran.5

7 Files scanned
3 Infected files found
3 Suspected files found
0 Files cured
3 Files deleted

显示全部楼层 · 发表于 2007-10-5 18:54:49

Scanning Log
Version of virus signature database: 2573 (20071005)
Date: 5.10.2007 Time: 18:54:52
Scanned disks, folders and files: G:\V\GbPluginBb.rar
G:\V\GbPluginBb.rar » RAR » YazzleActiveX.ocx.vir - a variant of Win32/TrojanDownloader.PurityScan trojan
G:\V\GbPluginBb.rar » RAR » albus.dll.vir - Win32/Adware.Boran application
G:\V\GbPluginBb.rar » RAR » DrUninst.exe.vir - is OK
G:\V\GbPluginBb.rar » RAR » f3Setup1.exe.vir - Win32/AdInstaller application
G:\V\GbPluginBb.rar » RAR » istactivex.dll.vir - Win32/TrojanDownloader.IstBar.DW trojan
G:\V\GbPluginBb.rar » RAR » loader.exe.vir - Win32/TrojanDownloader.Small.ON trojan
G:\V\GbPluginBb.rar » RAR » mmssver.dll.vir - Win32/Adware.Boran application

显示全部楼层 · 发表于 2007-10-5 18:58:54

Result: 5 malware found
AdWare.Win32.MediaTickets.z (adware)
C:\Users\Administrator\Desktop\GbPluginBb.rar\YazzleActiveX.ocx.vir
AdWare.Win32.Boran.y (adware)
C:\Users\Administrator\Desktop\GbPluginBb.rar\albus.dll.vir
Trojan-Downloader.Win32.IstBar.gen (virus)
C:\Users\Administrator\Desktop\GbPluginBb.rar\istactivex.dll.vir
Trojan-Downloader.Win32.Small.on (virus)
C:\Users\Administrator\Desktop\GbPluginBb.rar\loader.exe.vir
AdWare.Win32.Boran.s (adware)
C:\Users\Administrator\Desktop\GbPluginBb.rar\mmssver.dll.vir

显示全部楼层 · 发表于 2007-10-6 15:30:20

江民杀毒软件报告文件

北京江民新科技术有限公司

扫描引擎 11.00.702
病毒库日期 2007-10-06
更新日期 2007-10-06

扫描目标 V:\VirusDoc20071006\VirusDocBeta\032\GbPluginBb.rar

开始时间 2007-10-06 15:29:15

在 V:\VirusDoc20071006\VirusDocBeta\032\GbPluginBb.rar->f3Setup1.exe.vir 中发现 Trojan/Agent.cfz 病毒, 发现病毒
在 V:\VirusDoc20071006\VirusDocBeta\032\GbPluginBb.rar->istactivex.dll.vir 中发现 TrojanDownloader.IstBar.dw 病毒, 发现病毒
在 V:\VirusDoc20071006\VirusDocBeta\032\GbPluginBb.rar->loader.exe.vir 中发现 TrojanDownloader.Small.on 病毒, 发现病毒
在 V:\VirusDoc20071006\VirusDocBeta\032\GbPluginBb.rar->mmssver.dll.vir 中发现 Adware/Boran.c 病毒, 发现病毒
正常结束。

扫描结果:
               文件数 :9                                  病毒体 :4
               删除 :0                                  解毒 :0
扫描速度(千字节/秒) :0                               扫描时间 :00:00:00

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -    - - - - - - - - - - - -

[病毒样本] 继续广告 7个

本帖子中包含更多资源