一下载者[59D18F]

promised

zxy900906

Scan Log
Version of virus signature database: 2604 (20071019)
Date: 20.10.2007  Time: 16:47:38
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\1.rar
C:\Documents and Settings\Administrator\桌面\1.rar » RAR » 1.exe - probably unknown NewHeur_PE virus [7]
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 16:47:49  Total scanning time: 1 sec (00:00:01)
Notes:
[7] Object is probably infected with an unknown virus.

残缺的唯美

Result: 1 malware found
Trojan-Downloader.Win32.Agent.eby (virus)
C:\Users\Administrator\Desktop\1.rar\1.exe

nosferatu

Begin scan in 'C:\Documents and Settings\Administrator\桌面\1.rar'
C:\Documents and Settings\Administrator\桌面\1.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!

The EQs

要下载的东东
http://206.207.85.33/1.exe
http://206.207.85.33/2.exe

kk12

费尔 kv2008 pass

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Agent.zkd

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.14.52

qigang

原帖由 EQ2 于 2007-10-20 17:33 发表
要下载的东东
http://206.207.85.33/1.exe
http://206.207.85.33/2.exe

无法下载的东东。

woai_jolin

2007-10-20 19:57:17    运行应用程序      操作:允许
进程路径:C:\WINDOWS\Explorer.EXE
文件路径:G:\V\1.exe
触发规则:黑名单->禁止执行程序的目录->G:\V\*

2007-10-20 19:57:18    修改系统时间      操作:阻止
进程路径:G:\V\1.exe
触发规则:所有程序规则->*

2007-10-20 19:57:23    创建文件      操作:允许
进程路径:G:\V\1.exe
文件路径:C:\2.exe
触发规则:所有程序规则->系统文件->%SystemDrive%\*

2007-10-20 19:57:23    运行应用程序      操作:阻止
进程路径:G:\V\1.exe
文件路径:C:\WINDOWS\system32\ntvdm.exe
命令行:-f -i1 -o
触发规则:所有程序规则->系统程序_黑名单->*\ntvdm.exe

2007-10-20 19:57:23    运行应用程序      操作:允许
进程路径:C:\WINDOWS\Explorer.EXE
文件路径:G:\V\1.exe
触发规则:黑名单->禁止执行程序的目录->G:\V\*

1997-10-20 19:57:23    修改系统时间      操作:允许
进程路径:G:\V\1.exe
触发规则:所有程序规则->*

1997-10-20 19:57:27    创建文件      操作:允许
进程路径:G:\V\1.exe
文件路径:C:\1.exe
触发规则:所有程序规则->系统文件->%SystemDrive%\*

1997-10-20 19:57:27    运行应用程序      操作:阻止
进程路径:G:\V\1.exe
文件路径:C:\WINDOWS\system32\ntvdm.exe
命令行:-f -i2 -o
触发规则:所有程序规则->系统程序_黑名单->*\ntvdm.exe

1997-10-20 19:57:31    修改系统时间      操作:阻止
进程路径:G:\V\1.exe
触发规则:所有程序规则->*

1997-10-20 19:57:32    修改文件      操作:阻止
进程路径:G:\V\1.exe
文件路径:C:\2.exe
触发规则:所有程序规则->系统文件->%SystemDrive%\*

1997-10-20 19:57:32    运行应用程序      操作:阻止
进程路径:G:\V\1.exe
文件路径:C:\WINDOWS\system32\ntvdm.exe
命令行:-f -i3 -o
触发规则:所有程序规则->系统程序_黑名单->*\ntvdm.exe

1997-10-20 19:57:41    修改系统时间      操作:阻止
进程路径:G:\V\1.exe
触发规则:所有程序规则->*

[ 本帖最后由 woai_jolin 于 2007-10-20 19:59 编辑 ]

woai_jolin

BitDefender Log File !!!!!
Product : BitDefender Internet Security 2008
Version : BitDefender UIScanner v.11
Log date : 19:58:21 20/10/1997
Log path : C:\Documents and Settings\Administrator\Application Data\BitDefender\Desktop\Profiles\Logs\contextual\877348701_1_01.xml

Scan Paths:Path0000: G:\V\1.exe


Scan Options:Scan for viruses : Yes
Scan for adware : Yes
Scan for spyware : Yes
Scan for applications : Yes
Scan for dialers : Yes
Scan for rootkits : No


Target selection options:Scan registry keys : No
Scan cookies : No
Scan boot sectors : No
Scan memory processes : No
Scan archives : No
Scan runtime packers : No
Scan emails : No
Scan all files : No
Heuristic Scan : No
Scanned extensions : (null)
Excluded extensions :  


Target ProcessingDefault action for infected objects : Disinfect
Default action for suspicious objects : None
Default action for hidden objects : None


Scan engines summaryNumber of virus signatures : 0
Archive plugins : 0
Email plugins : 0
Scan plugins : 0
Archive plugins : 0
System plugins : 0
Unpack plugins : 0


Overall scan summaryScanned items : 0
Infected items : 0
Suspicious items : 0
Resolved items : 0
Individual viruses found : 0
Scanned directories : 0
Scanned boot sectors : 0
Scanned archives : 0
Input-output errors : 0
Scan time : 00:00:00:01
Files per second : 0


Scanned processes summaryScanned : 0
Infected : 0


Scanned registry keys summaryScanned : 0
Infected : 0


Scanned cookies summaryScanned : 0
Infected : 0


Remaining issues:Object Name Threat Name Final Status


Resolved issues:Object Name Threat Name Final Status
G:\V\1.exe BehavesLike:Trojan.Downloader Deleted